Премини към съдържанието

    Препоръчан отговор


    Здравейте, бихте ли ми казали дали имам повод за притеснение. Клавиатурата ми и мишката отказват на моменти, което ме навежда на мисълта че е заразена машината. Работи бавно и ми дава на моменти син екран. Прилагам логовете:

    DDS:

     

    DDS (Ver_2011-09-30.01) - NTFS_x86 
    Internet Explorer: 8.0.6001.18702
    Run by MONI at 14:35:59 on 2013-05-11
    Microsoft Windows XP Professional  5.1.2600.3.1251.359.1033.18.894.97 [GMT 3:00]
    .
    AV: Avira Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
    .
    ============== Running Processes ================
    .
    C:WINDOWSExplorer.EXE
    C:WINDOWSsystem32spoolsv.exe
    C:Program FilesAviraAntiVir Desktopsched.exe
    C:Program FilesAviraAntiVir Desktopavguard.exe
    C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
    C:WINDOWSSystem32PAStiSvc.exe
    C:Program FilesTeamViewerVersion8TeamViewer_Service.exe
    C:Program FilesVIAVIAudioiHDADeckHDeck.exe
    C:Program FilesAviraAntiVir Desktopavgnt.exe
    C:Program FilesSkypePhoneSkype.exe
    C:WINDOWSsystem32ctfmon.exe
    C:Program FilesTeamViewerVersion8TeamViewer.exe
    C:Program FilesAviraAntiVir Desktopavshadow.exe
    C:Program FilesTeamViewerVersion8tv_w32.exe
    C:WINDOWSSystem32alg.exe
    C:Program FilesGoogleChromeApplicationchrome.exe
    C:Program FilesGoogleChromeApplicationchrome.exe
    C:Program FilesGoogleChromeApplicationchrome.exe
    C:Program FilesMozilla Firefoxfirefox.exe
    c:program filesteamviewerversion8TeamViewer_Desktop.exe
    C:Program FilesGoogleChromeApplicationchrome.exe
    C:WINDOWSsystem32wbemwmiprvse.exe
    C:WINDOWSsystem32svchost.exe -k DcomLaunch
    C:WINDOWSsystem32svchost.exe -k rpcss
    C:WINDOWSSystem32svchost.exe -k netsvcs
    C:WINDOWSsystem32svchost.exe -k NetworkService
    C:WINDOWSsystem32svchost.exe -k LocalService
    C:WINDOWSsystem32svchost.exe -k LocalService
    C:WINDOWSsystem32svchost.exe -k imgsvc
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www1.delta-search.com/?affID=119529&babsrc=HP_ss&mntrId=5C83002268826863
    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll
    uRun: [skype] "c:program filesskypephoneSkype.exe" /minimized /regrun
    uRun: [ctfmon.exe] c:windowssystem32ctfmon.exe
    mRun: [HDAudDeck] c:program filesviaviaudioihdadeckHDeck.exe 1
    mRun: [avgnt] "c:program filesaviraantivir desktopavgnt.exe" /min
    dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE
    uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    uPolicies-Explorer: NoDriveAutoRun = dword:67108863
    uPolicies-Explorer: NoDrives = dword:0
    mPolicies-Explorer: NoDriveAutoRun = dword:67108863
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
    mPolicies-Explorer: NoDrives = dword:0
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
    mPolicies-Explorer: NoDriveAutoRun = dword:67108863
    IE: E&xport to Microsoft Excel - c:progra~1micros~2office11EXCEL.EXE/3000
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe
    TCP: NameServer = 89.215.233.2 89.215.246.40
    TCP: Interfaces{A48477B5-DFB6-4E66-93CA-3491DD09FD48} : DHCPNameServer = 89.215.233.2 89.215.246.40
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:program filescommon filesskypeSkype4COM.dll
    SecurityProviders: SecurityProviders = msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll
    LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg
    mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:program filesgooglechromeapplication26.0.1410.64installerchrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:documents and settingsmoniapplication datamozillafirefoxprofiles5w3wuf8l.default
    FF - plugin: c:documents and settingsall usersapplication datanexoneungmnpNxGameeu.dll
    FF - plugin: c:program filesadobereader 9.0readerairnppdf32.dll
    FF - plugin: c:program filesgoogleupdate1.3.21.145npGoogleUpdate3.dll
    FF - plugin: c:windowssystem32macromedflashNPSWF32_11_5_502_135.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: extensions.tuvaro.hpOld0 - 
    FF - user.js: extensions.tuvaro.tlbrSrchUrl - hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=main&toolbarid=base&u=5c8395d3000000000000002268826863&q=
    FF - user.js: extensions.tuvaro.id - 5c8395d3000000000000002268826863
    FF - user.js: extensions.tuvaro.appId - {2768469C-717B-401F-8532-C6D88BAE0339}
    FF - user.js: extensions.tuvaro.instlDay - 15812
    FF - user.js: extensions.tuvaro.vrsn - 1.8.17.1
    FF - user.js: extensions.tuvaro.vrsni - 1.8.17.1
    FF - user.js: extensions.tuvaro.vrsnTs - 1.8.17.114:03:46
    FF - user.js: extensions.tuvaro.prtnrId - tuvaro
    FF - user.js: extensions.tuvaro.prdct - tuvaro
    FF - user.js: extensions.tuvaro.aflt - orgnl
    FF - user.js: extensions.tuvaro.smplGrp - none
    FF - user.js: extensions.tuvaro.tlbrId - base
    FF - user.js: extensions.tuvaro.instlRef - 9e9471a2
    FF - user.js: extensions.tuvaro.dfltLng - 
    FF - user.js: extensions.tuvaro.excTlbr - false
    FF - user.js: extensions.tuvaro.ffxUnstlRst - false
    FF - user.js: extensions.tuvaro.admin - false
    FF - user.js: extensions.tuvaro.cam - 
    FF - user.js: extensions.tuvaro.autoRvrt - false
    FF - user.js: extensions.tuvaro.rvrt - false
    FF - user.js: extensions.tuvaro.hmpg - true
    FF - user.js: extensions.tuvaro.hmpgUrl - hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=homepage&toolbarid=base&u=5c8395d3000000000000002268826863
    FF - user.js: extensions.tuvaro.dfltSrch - true
    FF - user.js: extensions.tuvaro.srchPrvdr - Tuvaro
    FF - user.js: extensions.tuvaro.kw_url - hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=url&toolbarid=base&u=5c8395d3000000000000002268826863&q=
    FF - user.js: extensions.tuvaro.dnsErr - true
    FF - user.js: extensions.tuvaro.newTab - true
    FF - user.js: extensions.tuvaro.newTabUrl - chrome://tuvaro/content/new browser tab.html?source=9e9471a2&tbp=tab&u=5c8395d3000000000000002268826863
    FF - user.js: extensions.delta.tlbrSrchUrl - 
    FF - user.js: extensions.delta.id - 5c8395d3000000000000002268826863
    FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
    FF - user.js: extensions.delta.instlDay - 15812
    FF - user.js: extensions.delta.vrsn - 1.8.16.16
    FF - user.js: extensions.delta.vrsni - 1.8.16.16
    FF - user.js: extensions.delta.vrsnTs - 1.8.16.1614:06:01
    FF - user.js: extensions.delta.prtnrId - delta
    FF - user.js: extensions.delta.prdct - delta
    FF - user.js: extensions.delta.aflt - babsst
    FF - user.js: extensions.delta.smplGrp - none
    FF - user.js: extensions.delta.tlbrId - base
    FF - user.js: extensions.delta.instlRef - sst
    FF - user.js: extensions.delta.dfltLng - en
    FF - user.js: extensions.delta.excTlbr - false
    FF - user.js: extensions.delta.ffxUnstlRst - true
    FF - user.js: extensions.delta.admin - false
    FF - user.js: extensions.delta.autoRvrt - false
    FF - user.js: extensions.delta.rvrt - false
    FF - user.js: extensions.delta.newTab - false
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 mv61xxmm;mv61xxmm;c:windowssystem32driversmv61xxmm.sys [2012-7-12 13616]
    R0 mv64xxmm;mv64xxmm;c:windowssystem32driversmv64xxmm.sys [2012-7-12 5632]
    R0 mvxxmm;mvxxmm;c:windowssystem32driversmvxxmm.sys [2012-7-12 13616]
    R0 nvlegacy;nvlegacy;c:windowssystem32driversnvlegacy.sys [2012-7-12 100736]
    R1 avkmgr;avkmgr;c:windowssystem32driversavkmgr.sys [2013-1-6 37352]
    R2 AntiVirSchedulerService;Avira Scheduler;c:program filesaviraantivir desktopsched.exe [2013-1-6 86752]
    R2 AntiVirService;Avira Real-Time Protection;c:program filesaviraantivir desktopavguard.exe [2013-1-6 110816]
    R2 avgntflt;avgntflt;c:windowssystem32driversavgntflt.sys [2013-1-6 84744]
    R2 TeamViewer8;TeamViewer 8;c:program filesteamviewerversion8TeamViewer_Service.exe [2013-3-5 3574624]
    R3 MonitorFunction;Driver for Monitor;c:windowssystem32driversTVMonitor.sys [2013-2-3 13304]
    R3 PAC207;SoC PC-Camer@;c:windowssystem32driverspfc027.sys [2005-2-24 162176]
    R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:windowssystem32driversviahduaa.sys [2012-12-8 279680]
    S2 gupdate;Услуга на Google Актуализация (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2013-1-12 116648]
    S3 gupdatem;Услуга на Google Актуализация (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2013-1-12 116648]
    S3 vtany;vtany;??c:windowsvtany.sys --> c:windowsvtany.sys [?]
    S3 xhunter1;xhunter1;??c:windowsxhunter1.sys --> c:windowsxhunter1.sys [?]
    S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-7-12 250808]
    S4 SkypeUpdate;Skype Updater;c:program filesskypeupdaterUpdater.exe [2013-2-28 161384]
    .
    =============== Created Last 30 ================
    .
    2013-04-18 13:37:10 -------- d-----w- c:documents and settingsall usersapplication dataInterAction studios
    2013-04-17 15:58:18 -------- d-----w- c:windowssystem32appmgmt
    2013-04-17 11:05:32 -------- d-----w- c:documents and settingsmoniapplication dataBabylon
    2013-04-17 11:05:32 -------- d-----w- c:documents and settingsall usersapplication dataBabylon
    2013-04-17 11:03:19 -------- d--h--w- c:windowssystem32GroupPolicy
    2013-04-14 00:02:47 1072544 ----a-w- c:windowssystem32nvdrsdb1.bin
    2013-04-14 00:02:47 1072544 ----a-w- c:windowssystem32nvdrsdb0.bin
    2013-04-14 00:02:47 1 ----a-w- c:windowssystem32nvdrssel.bin
    2013-04-14 00:02:08 -------- d-----w- c:program filesNVIDIA Corporation
    2013-04-11 19:20:18 26520 ----a-w- c:program filesmozilla firefoxplugin-hang-ui.exe
    2013-04-11 19:20:01 96664 ----a-w- c:program filesmozilla firefoxwebapprt-stub.exe
    2013-04-11 19:20:01 19352 ----a-w- c:program filesmozilla firefoxxpcom.dll
    2013-04-11 19:20:01 18581400 ----a-w- c:program filesmozilla firefoxxul.dll
    2013-04-11 19:20:00 92056 ----a-w- c:program filesmozilla firefoxsmime3.dll
    2013-04-11 19:20:00 867000 ----a-w- c:program filesmozilla firefoxuninstallhelper.exe
    2013-04-11 19:20:00 272280 ----a-w- c:program filesmozilla firefoxupdater.exe
    2013-04-11 19:20:00 170232 ----a-w- c:program filesmozilla firefoxwebapp-uninstaller.exe
    2013-04-11 19:20:00 157080 ----a-w- c:program filesmozilla firefoxssl3.dll
    2013-04-11 19:20:00 152472 ----a-w- c:program filesmozilla firefoxsoftokn3.dll
    .
    ==================== Find3M  ====================
    .
    2013-03-27 15:22:35 84744 ----a-w- c:windowssystem32driversavgntflt.sys
    2013-03-27 15:22:35 37352 ----a-w- c:windowssystem32driversavkmgr.sys
    2013-03-08 08:35:47 293376 ----a-w- c:windowssystem32winsrv.dll
    2013-03-07 03:23:36 2070016 ----a-w- c:windowssystem32ntkrnlpa.exe
    2013-03-07 01:31:48 2193536 ----a-w- c:windowssystem32ntoskrnl.exe
    2013-03-02 02:05:19 920064 ----a-w- c:windowssystem32wininet.dll
    2013-03-02 02:05:18 43520 ----a-w- c:windowssystem32licmgr10.dll
    2013-03-02 02:05:18 1469440 ----a-w- c:windowssystem32inetcpl.cpl
    2013-03-02 01:31:30 1876224 ----a-w- c:windowssystem32win32k.sys
    2013-03-02 01:08:57 385024 ----a-w- c:windowssystem32html.iec
    2013-02-12 00:32:23 12928 ----a-w- c:windowssystem32driversusb8023.sys
    .
    ============= FINISH: 14:37:09,76 ===============
     
    Attach:
     
    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-09-30.01)
    .
    Microsoft Windows XP Professional
    Boot Device: DeviceHarddiskVolume1
    Install Date: 07.5.2005 г. 18:24:05
    System Uptime: 11.5.2013 г. 12:55:05 (2 hours ago)
    .
    Motherboard: FOXCONN |  | M61PMV
    Processor: AMD Sempron Processor LE-1200 | AMD Sempron Processor LE-1200 | 2109/201mhz
    .
    ==== Disk Partitions =========================
    .
    A: is Removable
    C: is FIXED (NTFS) - 68 GiB total, 59,224 GiB free.
    D: is FIXED (NTFS) - 165 GiB total, 146,672 GiB free.
    E: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    No restore point in system.
    .
    ==== Installed Programs ======================
    .
    µTorrent
    Пакет за езиков интерфейс на Windows
    Adobe Flash Player 11 ActiveX
    Adobe Flash Player 11 Plugin
    Adobe Reader 9.5.0 - Bulgarian
    Avira Free Antivirus
    CCleaner
    Chicken Invaders 3 Free Trial
    Compatibility Pack for the 2007 Office system
    Dekaron
    Diner Dash - Hometown Hero
    Google Chrome
    Google Update Helper
    K-Lite Codec Pack 8.4.0 (Standard)
    Microsoft Office 2003 Bulgarian User Interface Pack
    Microsoft Office File Validation Add-In
    Microsoft Office Professional Edition 2003
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
    Mozilla Firefox 20.0.1 (x86 bg)
    MSXML 4.0 SP3 Parser (KB2758694)
    Nero 7 Micro
    NVIDIA Drivers
    OnScreenKeys 5.0.48
    PC Camer@
    Platform
    REALTEK GbE & FE Ethernet PCI NIC Driver
    Realtek High Definition Audio Driver
    Security Update for Windows Internet Explorer 8 (KB2744842)
    Security Update for Windows Internet Explorer 8 (KB2761465)
    Security Update for Windows Internet Explorer 8 (KB2792100)
    Security Update for Windows Internet Explorer 8 (KB2797052)
    Security Update for Windows Internet Explorer 8 (KB2799329)
    Security Update for Windows Internet Explorer 8 (KB2809289)
    Security Update for Windows Internet Explorer 8 (KB2817183)
    Security Update for Windows XP (KB2808735)
    Security Update for Windows XP (KB2813170)
    Security Update for Windows XP (KB2820917)
    Skype™ 6.3
    TeamViewer 8
    The KMPlayer (remove only)
    VIA п»ї
    WebFldrs XP
    Winamp
    WinRAR 4.01 (32-битова версия)
    .
    ==== Event Viewer Messages From Past Week ========
    .
    07.5.2013 г. 13:16:53, error: Service Control Manager [7031]  - The Avira Real-Time Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.
    07.5.2013 г. 13:16:53, error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.
    07.5.2013 г. 13:16:53, error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for FailureActions with the following error:  Access is denied.
    .
    ==== End Of File ===========================
     

    Благодаря  :)

     

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

    Извинете за забавянето.

    Може ли да архивирате файловете от папката C:Windowsminidump и да ги качите на хост по-избор.

    Публикувайте линк за download в следващия си пост.

     

    Поздрави!

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

    Извинете за забавянето.

    Може ли да архивирате файловете от папката C:Windowsminidump и да ги качите на хост по-избор.

    Публикувайте линк за download в следващия си пост.

     

    Поздрави!

    Привет, ето линк към архива: http://dox.bg/files/dw?a=7813a0da6a

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

     

    Прегледах дъмп файловете и всички се дължат на драйвъра на VIA за звука:

     

    Probably caused by : viahduaa.sys ( viahduaa+19e60 )

     

    Нека да видим каква е вашаха хардуерна конфигурация за да обновим драйвъра до последната му версия.

     

    Свалете програмата Публикувано изображениеHWiNFO32

    След успешна инсталация и стартиране, ще се появи следния прозорец:
    Публикувано изображение

    Натиснете Run.

    Изчакайте търпеливо. След това изберете Save Report и HTML формат и натиснете Browse.

    Посочете вашия десктоп и натиснете Next.

    Ще се появява се Report Filter, изберете Finish.

    Публикувано изображение

    На десктопа ще се появи HTML файл с име "User Name", където "User Name" е името на компютъра Ви (например файла от снимката се казва HOLLER-PC.HTM). Качете файла тук и публикувайте линка за download в следващия си пост.


    И един от дъмповете се дължи на следното:

     

    Probably caused by : memory_corruption

     

    За тестване на РАМ паметта може да опитате с Memtest86+ 4.20
    Разархивирайте архива и запишете ISO файла с Burnaware например за да се получи буутващ диск с опцията Burn Image

    Публикувано изображение
    След това направете от БИОС-а CD/DVD устройството да е първото стартиращо устройство и направете проверка на РАМ паметта.
    Ако теста е успешен не би трябвало да има грешки:

    Публикувано изображение

    За да сте напълно сигурни, че РАМ-а е ок е добре да оставите теста за през нощта за поне едно 8-10 часа и още по-добре извадете всички плочки и оставете само една и ги тествайте една по една.
    Ако бъдат открити грешки ще видите грешки в червен фон подобно на тези:
    Публикувано изображение

    • Харесва ми 3

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

    Чудя се дали направо не можете да си карате само на драйвъра на Реалтек за звука, защото имате два драйвъра:

     

    Realtek HDA Audio Drive
    VIA HDA Audio Drive

     

    На сайта на Foxconn драйвърите са доста стари - от 2009-та

     

    На сайта на VIA намерий два за вашия кодек: VIA VT1708B CE

     

    По-стара, но сертифицирана версия - 10.005D Dated: 25-Jul-2012

     

     

    и  по-нова версия (не сертифицирана, но едва ли ще е проблем) - 10.1200A Dated: 7-Nov-2012

     

    Пробвайте и двата и вижте дали сините екрани ще изчезнат. При възможност обновете и останалите драйвъри (но за предпочитане е да не използвате допълнителен софтуер, защото те често свалят погрешните драйвъри за дадена конфигфурация).

     

    Все пак тествайте и РАМ-а и после пишете как е положението.

     

    Също така да почистим и малко Adware и да проверим за активни гадинки:

     

     

     

    СТЪПКА 1

     

     

    Публикувано изображение Изтеглете и стартирайте програмата AdwCleaner (by Xplode).

    • [*]Затворете всички стартирани програми и браузъри [*]Кликнете два пъти върху
    adwcleaner.exe за да стартирате инструмента. [*]Този път маркирайте Delete [*]Вашият компютър ще се рестартира автоматично. Текстовия файл ще се отвори след рестарта. [*]Моля, да публикувате съдържанието на този лог в отговора си [*]Можете да намерите лога,който автоматично се запомня тук C:AdwCleaner[s1].txt.

     

     

     

    СТЪПКА 2

     

     

     

    Публикувано изображение Моля изтеглете Junkware Removal Tool на вашия десктоп.


    • [*]Спрете временно работата на защитните програми. [*]Стартирайте инструмента
    JRT.exe [*]Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата. [*]Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши. [*]Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt). [*]Моля копирайте съдържанието на лог файла в следващия си пост.

     

     

     

    СТЪПКА 3

     

     

    Публикувано изображение Изтеглете Malwarebytes' Anti-Malware

     

    • [*]Кликнете два пъти върху
    mbam-setup.exe, за да инсталирате програмата. [*]Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish. [*]Ако има намерени обновявания, тя ще ги изтегли и инсталира. [*]Стартирайте програмата и изберете "Perform Quick Scan", след това кликнете на Scan. [*]Сканирането ще отнеме малко време, затова моля да бъдете търпеливи. [*]Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата. [*]Уверете се, че на всички редове има отметки, и кликнете на Remove Selected. [*]Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. [*]Прикачете този лог в следващия си коментар в темата.

    Забележка: Ако MalwareBytes'Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поискада рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

     

     

    СТЪПКА 4

     

     

    Публикувано изображение
    1) Изтеглете: ESET Online Scanner
    2) Стартирайте esetsmartinstaller_enu.exe
    3) Сложете отметка на YES, I accept the Terms of Use и изберете Start
    4) Скенерът ще започне да изтегля компонентите, които са му необходими.
    5) Уверете се, че има отметки на следните редове, включително и тези от менюто Advanced Settings:

    • [*]
    Scan archives [*]Scan for potentially unwanted applications [*]Scan for potentially unsafe applications [*]Enable Anti-Stealth technology

    Уверете се че, Remove found threats няма отметка!

    И накрая изберете Start

    6) Скенерът ще започне да изтегля последните дефиниции.
    7) След, като сканирането завърши изберете Finish.
    8) Отидете в: C:Program FilesESETESET Online Scanner.

    9) Прикачете лог с името log.txt файла в следващия си пост.

     

     

     

    СТЪПКА 5

     

     

     

    Публикувано изображение
    Изтеглете Security Check от screen317 от този линк или и го запаметете на вашия десктоп.

    • [*]Кликнете два пъти върху
    SecurityCheck.exe и следвайте инструкциите. [*]Накрая, автоматично ще се отвори текстов документ, наречен checkup.txt, моля прикачете го в следващия ви коментар в тази тема.

    • Харесва ми 2

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте, ето резултати: 

     

     

    П.С. Снимката е прекалено голяма за да я кача тук, затова ви пускам линк:  

    http://dox.bg/files/dw?a=a70a18da55

     

    AdwCleanerS2.txt

    checkup.txt

    JRT.txt

    log.txt

    Редактирано от krasnika^ (преглед на промените)
    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Липсва лога от MBAM и за съжаление снимката от Eset не върши работа, защото файловете са с криптирани имена, но щом не пазите лога (както ми писахте по Л.С.) нищо не можем да направим за да видим какво е изтрила програмата след първото стартиране. Втория лог от Есет е чист.

     

    Как е сега положението - обновихте ли драйвърите за звука и продължават ли проблемите заради които отворихте темата?

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Прикачам липсващия лог. Появи се нов проблем с драйверите на звука - след инсталацията на новия драйвер ( без сертификата) не ми позволява да включа микрофона в предния панел. Машината се държи по - добре. Само да попитам: да махам ли инструментите които ползвахме ? И какво да правя с файловете под карантина ? Благодаря ви.

    mbam-log-2013-04-06 (11-36-38).txt

    Редактирано от krasnika^ (преглед на промените)
    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте, файловете на Eset Online Scaner-a и папката в която са инсталирани остана след указаната от вас деинсталация както и карантината на програмата. Компютъра е много "по - пъргав" ако мога така да се изразя. Справихме се успешно с драйверите, и вече всичко е наред. Засега няма сини екрани и едва ли ще има повече проблеми след вашата намеса, за което ви Благодаря :wors: . Проблемите са решени. Само ми укажете начин по който да премахна програмата Eset Online Scaner  безопасно. Поздрави и лека работа :)

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Явно прибързах със заключенията относно сините екрани. Днес пак се появи ето кода на грешката: 0x000000D1(0xEB0F6E60,0x00000002,0x00000008,0xEB0F6E60). Бихте ли ми казали от какво може да е ? При рестарт на системата и опит да се затвори доклада за грешка на Microsoft дава пак синя страница с този код:0x000000d1(0xEB161E60,0x00000002,0x00000000,0xEB161E60).

    Редактирано от krasnika^ (преглед на промените)
    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Най-вероятно причината е в драйвър - и може би отново този на VIA.

     

     

    DRIVER_IRQL_NOT_LESS_OR_EQUAL

     

     

     

    Вижте дали има нов dmp файл в папката C:Windowsminidump и ако има го архивирайте.

     

    Ако отново се окаже, че е заради драйвъра на VIA инсталирайте последната версия без сертификата и пробвайте да работите без микрофона или пробвайте изцяло да карате само на драйвърите на Realtek. Щом помагате по TeamViewer-a няма и как да тествате рама от разстояние - но като имате физически достъп до компютъра тествайте плочките на РАМ-а една по една с Memtest, както бях написал по-нагоре.

     

    Също така:

     

    Изтеглете Autoruns и:

     

    • [*]Стартирайте програмата; [*]Изберете
    Options => Filter Options => сложете отметки пред Verify Code Signature и Hide Microsoft Entries; [*]От менюто File -> Refresh; [*]От менюто File -> Save...; [*]Запазете файла някъде с желано от вас име (във формат arn), архивирайте го с програма по желание и го прикачете към темата.

    ПС: Остатъците от Есет можете да изтриете и ръчно.

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Сложихме драйвера на производителя ( с който е купено дъното) и за сега има звук. Има нови Дъмп файлове които прилагам към темата, както и резултата от програмата който поискахте. Поздрави :) http://dox.bg/files/dw?a=b5f4cf62a5 - Minidump

    http://dox.bg/files/dw?a=46a1d5d226 Autoruns - резултат

     

     

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Лошото е, че драйвъра от сайта на производителя, който съм дал е доста стар и може би дори вие в момента сте били със същата версия, която е правила и проблема.

    Според дъмп файловете отново виновен е драйвъра на VIA - viahduaa.sys.

     

    Вариантите са 2.

     

    1. Деинсталирате го и използвате само този на Realtek.

    2. Инсталирате сертифицираната версия, която е по-нова версия от тази на сайта на Foxconn, но и по-стара от несертифицираната версия от сайта на Via.

     

    Поне знаете, къде е проблема! :)

     

    Колкото до Autoruns можете да премахнете следните отметки (не да ги изтриете, а само ги отмаркирайте):

     

    Adobe ARM

    HDAudDeck

     

    И после затворете програмата.

    Изтрийте използваните от нас инструменти. Аз маркирам случая като решен...просто за драйвъра за VIA ако това не помогне не се сещам за друго адекватно решение...

     

    Поздрави!

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте,

     

     

    Прегледах дъмп файловете и всички се дължат на драйвъра на VIA за звука:

     

     

    Нека да видим каква е вашаха хардуерна конфигурация за да обновим драйвъра до последната му версия.

     

    Свалете програмата Публикувано изображениеHWiNFO32

    След успешна инсталация и стартиране, ще се появи следния прозорец:

    Публикувано изображение

    Натиснете Run.

    Изчакайте търпеливо. След това изберете Save Report и HTML формат и натиснете Browse.

    Посочете вашия десктоп и натиснете Next.

    Ще се появява се Report Filter, изберете Finish.

    Публикувано изображение

    На десктопа ще се появи HTML файл с име "User Name", където "User Name" е името на компютъра Ви (например файла от снимката се казва HOLLER-PC.HTM). Качете файла тук и публикувайте линка за download в следващия си пост.

    И един от дъмповете се дължи на следното:

     

     

    За тестване на РАМ паметта може да опитате с Memtest86+ 4.20

    Разархивирайте архива и запишете ISO файла с Burnaware например за да се получи буутващ диск с опцията Burn Image

    Публикувано изображение

    След това направете от БИОС-а CD/DVD устройството да е първото стартиращо устройство и направете проверка на РАМ паметта.

    Ако теста е успешен не би трябвало да има грешки:

    Публикувано изображение

    За да сте напълно сигурни, че РАМ-а е ок е добре да оставите теста за през нощта за поне едно 8-10 часа и още по-добре извадете всички плочки и оставете само една и ги тествайте една по една.

    Ако бъдат открити грешки ще видите грешки в червен фон подобно на тези:

    Публикувано изображение

    С огромно закъснение, за което много се извинявам, бих искал да ви съобщя, че състоянието на системата е много добро. Наложи се да преинсталираме целия компютъра с пълно форматиране и разцепване на харддиска, след което направих теста на РАМ паметта ( както ме посъветвахте - цяла нощ ) резултата е че : няма грешки в паметта, и за момента работи добре, и без сини екрани :)  Още веднъж Благодаря за помощта и положените усилия :)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Все пак причината бе и си остава в драйвърите на Realtek...и затова го имайте предвид! :)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    :)  точно затова този път съм качил всички без тях :)

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Регистрирайте се или влезете в профила си за да коментирате

    Трябва да имате регистрация за да може да коментирате това

    Регистрирайте се

    Създайте нова регистрация в нашия форум. Лесно е!

    Нова регистрация

    Вход

    Имате регистрация? Влезте от тук.

    Вход


    • Горещи теми в момента

    • Подобни теми

      • от Borrislav Lazarov
        Здравейте, от няколко дена като си включа лаптопа и антивирусната ми засича вирус. Първите пъти го триех, но след рестарт го засича отново. Тъй като нямах хубав интернет и не можех да направя нищо не съм търсил нищо за него. Днес имам горе-долу добър интернет и ако може да ми помогнете да го изчистя. Dell Latitude E6420 Win 10 64bit. Ще съм ви благодарен, ако ми помогнете да го премахна днес, защото утре ще пътувам в чужбина и не знам кога ще имам хубав интернет.  
         
        FRST.txt
        Addition.txt
      • от svetlio80tm
        Здравейте! Преди време имах следния проблем- дял С, който ми е системния, постоянно се пълнеше. Използвах Disk Cleanup, но ефектът от него не трае дълго. След като отмине този ефект, отново ми излиза съобщението за Lowdisk space. Постарах се да изтрия всички ненужни файлове и да деинсталирам ненужни програми с цел спестяване на място, но без успех- ако освободя 4- 5 гб, то на компа му отнема ден два отново да запълни това място. Трия и файловете в папка Темп- C:\Users\Svetlio\AppData\Local\Temp, но кой знае колко място не се освобождаваше.
        След като писах тук, проблемът беше решен и дял С се освободи с около 30 гб. Оказа се, че именно в папка Темп- C:\Users\Svetlio\AppData\Local\Temp са се намирали някакви неща, които са заемали място.
        Няколко месеца по- късно сега имам същия проблем, подозирам, че пак в папка Темп е проблема,  но не ми показва размера на папката да е огромен, нито файловете, които подозирам, че са там, са видими. Включил съм опцията да се виждат скритите папки и файлове. Не мога да изтрия цялата папка/ с идеята да я създам наново след това, но празна/, тъй като вътре остава един единствен фйл, който не ми дава системата да го изтрия, същият е със скромен размер и име FXSAPIDebugLogFile.
        Системата ми е Уин 7 ултимейт, нямам диск за нея. Използвам антивирусна Eset Endpoint Antivirus 5.0.2126.3, оригинална, при скан не показва проблем. Не ползвам софтуер за почистване от malware, но след помощта, дадена му тук, по съвет оттук ползвам Malwarebytes Anti-Malware. Със същия не мога  да отстраня проблема .
         
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-09-2017
        Ran by Svetlio (administrator) on STOYNOV (30-09-2017 18:01:32)
        Running from C:\Users\Svetlio\Desktop
        Loaded Profiles: Svetlio (Available Profiles: Svetlio)
        Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
        Internet Explorer Version 11 (Default browser: FF)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (AMD) C:\Windows\System32\atiesrxx.exe
        (ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe
        (AMD) C:\Windows\System32\atieclxx.exe
        (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
        () C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe
        (ESET) C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe
        () C:\ProgramData\ZDSupport\ZDServ\CancelAutoPlay_Server.exe
        (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
        (TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
        (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Monitor\BtMon2.exe
        (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Monitor\BtMon64.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
        (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
        (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
        (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
        (TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
        (TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
        (TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
        (TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosAVRC.exe
        (TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\tosOBEX.exe
        (TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\tosBtProc.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
        (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [4133072 2012-07-04] (ESET)
        HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
        HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-01-20] (Advanced Micro Devices, Inc.)
        HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-05] (Intel Corporation)
        HKLM-x32\...\Run: [ITSecMng] => C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-01] (TOSHIBA CORPORATION)
        HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
        HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
        HKU\S-1-5-21-4293124291-1132123756-2605706134-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
        HKU\S-1-5-21-4293124291-1132123756-2605706134-1000\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [908160 2010-03-16] (Microsoft Corporation)
        HKU\S-1-5-21-4293124291-1132123756-2605706134-1000\...\MountPoints2: {ea748c5c-0fa2-11e5-bb75-00266c28c559} - H:\AutoRun.exe
        Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk [2013-04-21]
        ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
        Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Monitor.lnk [2013-04-21]
        ShortcutTarget: Bluetooth Monitor.lnk -> C:\Program Files (x86)\TOSHIBA\Bluetooth Monitor\BtMon2.exe (TOSHIBA CORPORATION)
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
        Tcpip\..\Interfaces\{21B68A78-8991-4F3D-902B-5434B600D101}: [DhcpNameServer] 192.168.1.1
        Tcpip\..\Interfaces\{3D02E567-A130-4CF8-99E1-0C75106838E5}: [DhcpNameServer] 212.122.188.92 172.16.50.1
        Tcpip\..\Interfaces\{63FC5E1B-3D8D-4464-8E71-B779DD6CE018}: [DhcpNameServer] 192.168.0.1 192.168.0.1
        Internet Explorer:
        ==================
        HKU\S-1-5-21-4293124291-1132123756-2605706134-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
        BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
        BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
        BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
        BHO-x32: QUICKfind BHO Object -> {C08DF07A-3E49-4E25-9AB0-D3882835F153} -> C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll [2003-06-30] ()
        DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        FireFox:
        ========
        FF ProfilePath: C:\Users\Svetlio\AppData\Roaming\Mozilla\Firefox\Profiles\iuj3lf84.default [2017-09-30]
        FF Homepage: Mozilla\Firefox\Profiles\iuj3lf84.default -> hxxp://google.bg
        FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird
        FF Extension: (ESET Endpoint Security Extension) - C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird [2013-04-19] [not signed]
        FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-12] ()
        FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
        FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
        FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-12] ()
        FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-04-23] (Foxit Corporation)
        FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-04-23] (Foxit Corporation)
        FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
        FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
        FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-04-21] (Apple Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-04-21] (Apple Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-04-21] (Apple Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2013-04-21] (Apple Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2013-04-21] (Apple Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2013-04-21] (Apple Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2013-04-21] (Apple Inc.)
        FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2012-06-28] (Nullsoft, Inc.)
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S3 EhttpSrv; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [35720 2012-07-04] (ESET)
        R2 ekrn; C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe [999704 2012-07-04] (ESET)
        S3 ESHASRV; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [190208 2012-07-04] (ESET)
        R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
        R2 ZDServ; C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe [427264 2013-08-19] ()
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-19] (DT Soft Ltd)
        R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [213416 2012-07-10] (ESET)
        U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [179920 2012-07-10] (ESET)
        R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [152136 2012-03-29] (ESET)
        R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [140752 2012-03-29] (ESET)
        R3 SmbDrv; C:\Windows\System32\DRIVERS\Smb_driver.sys [21264 2011-12-22] (Synaptics Incorporated)
        S3 massfilter; system32\drivers\massfilter.sys [X]
        S3 VGPU; System32\drivers\rdvgkmd.sys [X]
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-30 18:01 - 2017-09-30 18:01 - 000000000 ____D C:\FRST
        2017-09-30 18:00 - 2017-09-30 18:00 - 002399744 _____ (Farbar) C:\Users\Svetlio\Desktop\FRST64.exe
        2017-09-29 11:24 - 2017-09-29 11:24 - 006389608 _____ C:\Users\Svetlio\Desktop\New_Success_UpperIntermediate_TB.pdf
        2017-09-28 11:02 - 2017-09-28 11:03 - 127772721 _____ C:\Users\Svetlio\Desktop\live_beat_2_sb.pdf
        2017-09-28 10:22 - 2017-09-28 10:23 - 026986785 _____ C:\Users\Svetlio\Desktop\live_beat_2_workbook.pdf
        2017-09-26 15:11 - 2017-09-26 15:11 - 000000000 ____D C:\ProgramData\ATI
        2017-09-25 22:42 - 2017-09-25 22:43 - 000025132 _____ C:\Users\Svetlio\Desktop\Addition.txt
        2017-09-25 22:40 - 2017-09-30 18:02 - 000011236 _____ C:\Users\Svetlio\Desktop\FRST.txt
        2017-09-18 15:54 - 2017-09-18 15:56 - 000000000 ____D C:\Windows\rescache
        2017-09-13 17:33 - 2017-08-19 18:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
        2017-09-13 17:33 - 2017-08-19 18:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
        2017-09-13 17:33 - 2017-08-16 18:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
        2017-09-13 17:33 - 2017-08-16 18:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
        2017-09-13 17:33 - 2017-08-16 17:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
        2017-09-13 17:33 - 2017-08-16 04:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
        2017-09-13 17:33 - 2017-08-16 03:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
        2017-09-13 17:33 - 2017-08-15 18:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
        2017-09-13 17:33 - 2017-08-15 18:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
        2017-09-13 17:33 - 2017-08-15 18:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
        2017-09-13 17:33 - 2017-08-15 18:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
        2017-09-13 17:33 - 2017-08-15 17:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
        2017-09-13 17:33 - 2017-08-15 17:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
        2017-09-13 17:33 - 2017-08-15 17:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
        2017-09-13 17:33 - 2017-08-15 17:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
        2017-09-13 17:33 - 2017-08-15 16:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
        2017-09-13 17:33 - 2017-08-14 20:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
        2017-09-13 17:33 - 2017-08-14 20:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
        2017-09-13 17:33 - 2017-08-14 20:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
        2017-09-13 17:33 - 2017-08-14 20:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
        2017-09-13 17:33 - 2017-08-14 20:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
        2017-09-13 17:33 - 2017-08-14 20:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
        2017-09-13 17:33 - 2017-08-14 20:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
        2017-09-13 17:33 - 2017-08-14 20:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
        2017-09-13 17:33 - 2017-08-14 00:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
        2017-09-13 17:33 - 2017-08-14 00:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
        2017-09-13 17:33 - 2017-08-13 21:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
        2017-09-13 17:33 - 2017-08-13 20:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
        2017-09-13 17:33 - 2017-08-13 20:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
        2017-09-13 17:33 - 2017-08-13 20:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
        2017-09-13 17:33 - 2017-08-13 20:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
        2017-09-13 17:33 - 2017-08-13 20:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
        2017-09-13 17:33 - 2017-08-13 20:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
        2017-09-13 17:33 - 2017-08-13 20:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
        2017-09-13 17:33 - 2017-08-13 20:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
        2017-09-13 17:33 - 2017-08-13 19:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
        2017-09-13 17:33 - 2017-08-13 19:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
        2017-09-13 17:33 - 2017-08-13 19:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
        2017-09-13 17:33 - 2017-08-13 19:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
        2017-09-13 17:33 - 2017-08-13 19:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
        2017-09-13 17:33 - 2017-08-13 19:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
        2017-09-13 17:33 - 2017-08-13 19:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
        2017-09-13 17:33 - 2017-08-13 19:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
        2017-09-13 17:33 - 2017-08-13 19:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
        2017-09-13 17:33 - 2017-08-13 19:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
        2017-09-13 17:33 - 2017-08-13 19:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
        2017-09-13 17:33 - 2017-08-13 19:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
        2017-09-13 17:33 - 2017-08-13 19:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
        2017-09-13 17:33 - 2017-08-13 19:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
        2017-09-13 17:33 - 2017-08-13 19:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
        2017-09-13 17:33 - 2017-08-13 19:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
        2017-09-13 17:33 - 2017-08-13 19:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
        2017-09-13 17:33 - 2017-08-13 19:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
        2017-09-13 17:33 - 2017-08-13 19:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
        2017-09-13 17:33 - 2017-08-13 19:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
        2017-09-13 17:33 - 2017-08-13 19:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
        2017-09-13 17:33 - 2017-08-13 19:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
        2017-09-13 17:33 - 2017-08-13 19:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
        2017-09-13 17:33 - 2017-08-13 19:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
        2017-09-13 17:33 - 2017-08-13 19:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
        2017-09-13 17:33 - 2017-08-13 19:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
        2017-09-13 17:33 - 2017-08-13 19:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
        2017-09-13 17:33 - 2017-08-13 19:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
        2017-09-13 17:33 - 2017-08-13 19:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
        2017-09-13 17:33 - 2017-08-13 19:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
        2017-09-13 17:33 - 2017-08-13 19:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
        2017-09-13 17:33 - 2017-08-13 19:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
        2017-09-13 17:33 - 2017-08-13 19:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
        2017-09-13 17:33 - 2017-08-13 19:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
        2017-09-13 17:33 - 2017-08-13 19:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
        2017-09-13 17:33 - 2017-08-13 19:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
        2017-09-13 17:33 - 2017-08-13 19:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
        2017-09-13 17:33 - 2017-08-13 19:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
        2017-09-13 17:33 - 2017-08-13 19:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
        2017-09-13 17:33 - 2017-08-13 18:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
        2017-09-13 17:33 - 2017-08-13 18:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
        2017-09-13 17:33 - 2017-08-13 18:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
        2017-09-13 17:33 - 2017-08-13 18:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
        2017-09-13 17:33 - 2017-08-13 18:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
        2017-09-13 17:33 - 2017-08-13 18:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
        2017-09-13 17:33 - 2017-08-13 18:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
        2017-09-13 17:33 - 2017-08-13 18:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
        2017-09-13 17:33 - 2017-08-13 18:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
        2017-09-13 17:33 - 2017-08-13 18:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
        2017-09-13 17:33 - 2017-08-13 18:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
        2017-09-13 17:33 - 2017-08-13 18:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
        2017-09-13 17:33 - 2017-08-13 18:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
        2017-09-13 17:33 - 2017-08-11 09:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
        2017-09-13 17:33 - 2017-08-11 09:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
        2017-09-13 17:33 - 2017-08-11 09:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
        2017-09-13 17:33 - 2017-08-11 09:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
        2017-09-13 17:33 - 2017-08-11 09:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
        2017-09-13 17:33 - 2017-08-11 09:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
        2017-09-13 17:33 - 2017-08-11 09:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
        2017-09-13 17:33 - 2017-08-11 09:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
        2017-09-13 17:33 - 2017-08-11 09:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
        2017-09-13 17:33 - 2017-08-11 09:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
        2017-09-13 17:33 - 2017-08-11 09:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
        2017-09-13 17:33 - 2017-08-11 09:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
        2017-09-13 17:33 - 2017-08-11 09:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 09:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
        2017-09-13 17:33 - 2017-08-11 09:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
        2017-09-13 17:33 - 2017-08-11 09:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
        2017-09-13 17:33 - 2017-08-11 09:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
        2017-09-13 17:33 - 2017-08-11 09:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
        2017-09-13 17:33 - 2017-08-11 09:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
        2017-09-13 17:33 - 2017-08-11 09:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
        2017-09-13 17:33 - 2017-08-11 09:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
        2017-09-13 17:33 - 2017-08-11 09:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
        2017-09-13 17:33 - 2017-08-11 09:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
        2017-09-13 17:33 - 2017-08-11 09:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
        2017-09-13 17:33 - 2017-08-11 09:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
        2017-09-13 17:33 - 2017-08-11 09:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
        2017-09-13 17:33 - 2017-08-11 08:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
        2017-09-13 17:33 - 2017-08-11 08:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
        2017-09-13 17:33 - 2017-08-11 08:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
        2017-09-13 17:33 - 2017-08-11 08:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
        2017-09-13 17:33 - 2017-08-11 08:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
        2017-09-13 17:33 - 2017-08-11 08:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
        2017-09-13 17:33 - 2017-08-11 08:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
        2017-09-13 17:33 - 2017-08-11 08:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
        2017-09-13 17:33 - 2017-08-11 08:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
        2017-09-13 17:33 - 2017-08-11 08:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
        2017-09-13 17:33 - 2017-08-11 08:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
        2017-09-13 17:33 - 2017-08-11 08:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
        2017-09-13 17:33 - 2017-08-11 08:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
        2017-09-13 17:33 - 2017-08-11 08:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 08:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 08:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
        2017-09-13 17:33 - 2017-08-11 08:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
        2017-09-13 17:33 - 2017-07-07 18:29 - 001143296 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
        2017-09-13 17:33 - 2017-07-07 18:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
        2017-09-12 11:44 - 2017-09-12 11:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
        2017-09-12 11:44 - 2017-09-12 11:44 - 000002697 _____ C:\Users\Public\Desktop\Skype.lnk
        2017-09-12 11:40 - 2017-09-12 11:40 - 000000000 ____D C:\ProgramData\Package Cache
        2017-09-11 21:13 - 2017-09-11 21:13 - 000000000 ____D C:\Users\Svetlio\AppData\Roaming\MPC-HC
        2017-09-11 21:11 - 2017-09-11 21:12 - 014185472 _____ (MPC-HC Team ) C:\Users\Svetlio\Desktop\MPC-HC.1.7.13.x64.exe
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-30 17:56 - 2016-11-22 14:49 - 000000000 ____D C:\Users\Svetlio\AppData\LocalLow\Mozilla
        2017-09-30 17:50 - 2013-04-19 20:36 - 000000000 ____D C:\Users\Svetlio\AppData\Roaming\Skype
        2017-09-30 10:55 - 2009-07-14 07:45 - 000021472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
        2017-09-30 10:55 - 2009-07-14 07:45 - 000021472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
        2017-09-28 10:56 - 2013-04-20 11:22 - 000001748 _____ C:\Users\Svetlio\Desktop\MPC-HC x64.lnk
        2017-09-26 15:05 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\system32\NDF
        2017-09-25 22:34 - 2009-07-14 08:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
        2017-09-25 21:38 - 2017-04-26 20:18 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
        2017-09-15 10:27 - 2009-07-14 08:13 - 000782510 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-09-15 10:27 - 2009-07-14 06:20 - 000000000 ____D C:\Windows\inf
        2017-09-13 18:09 - 2009-07-14 07:45 - 000430960 _____ C:\Windows\system32\FNTCACHE.DAT
        2017-09-13 17:53 - 2013-07-19 17:56 - 000000000 ____D C:\Windows\system32\MRT
        2017-09-13 17:51 - 2013-04-19 18:18 - 138202976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
        2017-09-13 17:43 - 2014-02-28 07:59 - 000766820 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
        2017-09-13 12:42 - 2016-10-24 19:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
        2017-09-13 12:42 - 2013-04-19 18:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
        2017-09-12 17:51 - 2013-04-19 15:02 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
        2017-09-12 17:51 - 2013-04-19 15:01 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
        2017-09-12 17:51 - 2013-04-19 15:01 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
        2017-09-12 17:51 - 2013-04-19 15:01 - 000000000 ____D C:\Windows\SysWOW64\Macromed
        2017-09-12 17:51 - 2013-04-19 15:01 - 000000000 ____D C:\Windows\system32\Macromed
        2017-09-12 11:45 - 2013-04-19 20:36 - 000000000 ____D C:\ProgramData\Skype
        2017-09-12 11:44 - 2016-01-30 17:14 - 000000000 ___RD C:\Program Files (x86)\Skype
        2017-09-11 21:17 - 2016-05-03 22:16 - 000000000 ____D C:\Users\Svetlio\AppData\LocalLow\uTorrent
        2017-09-11 21:17 - 2013-04-19 18:36 - 000000000 ____D C:\Users\Svetlio\AppData\Roaming\uTorrent
        2017-09-11 21:13 - 2013-04-20 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
        2017-09-11 21:13 - 2013-04-20 11:22 - 000000000 ____D C:\Program Files\MPC-HC
        ==================== Files in the root of some directories =======
        2013-12-19 23:42 - 2013-12-19 23:42 - 000003584 _____ () C:\Users\Svetlio\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        2013-04-19 14:21 - 2013-04-19 14:21 - 000000017 _____ () C:\Users\Svetlio\AppData\Local\resmon.resmoncfg
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\SysWOW64\wininit.exe => File is digitally signed
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\SysWOW64\explorer.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\SysWOW64\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\SysWOW64\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\SysWOW64\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-09-28 15:08
        ==================== End of FRST.txt ============================
        Addition.txt
      • от Len-k
        Здравейте,
        Търся помощ за следния проблем - от няколко дни, като се опитам да стартирам медия плейър, торент програма и дори Avira, ми излиза грешка 'COM Surrogate спря да работи', която не изчезва, докато не затворя съответната програма. Имам чувството, че проблемът се разпространява и по други програми. Нямам ОС диск, ето лога:
        Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-09-2017
        Ran by Lena (administrator) on ELE (01-10-2017 10:33:03)
        Running from C:\Users\Lena\Desktop
        Loaded Profiles: Lena (Available Profiles: Lena)
        Platform: Windows 8.1 Pro (X64) Language: Английски (Обединено кралство)
        Internet Explorer Version 11 (Default browser: Opera)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
        (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
        (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
        (SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
        (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
        (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
        (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
        (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
        (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
        (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
        (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
        (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
        (ASUSTek Computer INC.) C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe
        (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
        (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
        (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
        (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
        (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
        (ASUS) C:\Program Files\ASUS\ASUS FlipLock\TransformService.exe
        (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
        (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
        (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
        (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
        (Intel Corporation) C:\Windows\System32\igfxHK.exe
        (Intel Corporation) C:\Windows\System32\igfxTray.exe
        (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
        (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
        (Intel Corporation) C:\Windows\System32\igfxEM.exe
        (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
        (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
        (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
        (STMicroelectronics) C:\Program Files (x86)\ST Microelectronics\ST_ACCEL\FFP_Manager.exe
        (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
        (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
        (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
        (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
        (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
        (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
        (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
        (pdfforge GmbH) C:\Program Files (x86)\PDF Architect 3\creator-ws.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Microsoft Corporation) C:\Windows\System32\WWAHost.exe
        (Microsoft Corporation) C:\Windows\System32\WWAHost.exe
        (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
        (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Microsoft Corporation) C:\Windows\System32\wlanext.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Opera Software) C:\Program Files (x86)\Opera\48.0.2685.32\opera.exe
        (Microsoft Corporation) C:\Windows\System32\dllhost.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
        HKLM\...\Run: [ASUS HDD Protection Tray Application] => C:\Program Files (x86)\ST Microelectronics\ST_ACCEL\FFP_Manager.exe [54272 2013-12-04] (STMicroelectronics)
        HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
        HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-17] (ASUSTek Computer Inc.)
        HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
        HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
        HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [919032 2017-09-01] (Avira Operations GmbH & Co. KG)
        HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
        HKLM-x32\...\Run: [] => [X]
        HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-01-03] (Adobe Systems Incorporated)
        HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-01-03] (Adobe Systems Inc.)
        HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
        HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
        HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4174464 2017-05-23] (Safer-Networking Ltd.)
        HKLM-x32\...\RunOnce: [{7a4579ba-01bc-4cca-b13c-451f77ab96b6}] => C:\ProgramData\Package Cache\{7a4579ba-01bc-4cca-b13c-451f77ab96b6}\Avira.OE.Setup.Bundle.exe [1288960 2017-09-28] (Avira Operations GmbH & Co. KG)
        Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\Run: [AdobeBridge] => [X]
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27214296 2016-11-15] (Skype Technologies S.A.)
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\Run: [Spotify Web Helper] => C:\Users\Lena\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-05-07] (Spotify Ltd)
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\Run: [Spotify] => C:\Users\Lena\AppData\Roaming\Spotify\Spotify.exe [7064176 2017-05-07] (Spotify Ltd)
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\MountPoints2: {b97f3f73-4e73-11e5-8263-801934637ecc} - "E:\SETUP.EXE" 
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\MountPoints2: {b97f4291-4e73-11e5-8263-801934637ecc} - "G:\SETUP.EXE" 
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\MountPoints2: {c63ff7f0-a126-11e7-8284-801934637ecc} - "E:\HiSuiteDownLoader.exe" 
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\...\MountPoints2: {ea505492-4bf1-11e5-8260-801934637ecc} - "E:\WD Drive Unlock.exe" autoplay=true
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\SysWOW64\ASUS.scr
        BootExecute: autocheck autochk * sdnclean64.exe
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
        Tcpip\Parameters: [DhcpNameServer] 212.39.90.42 8.8.8.8
        Tcpip\..\Interfaces\{04D1F568-9DB5-4D56-8CA5-64FC1C79595E}: [DhcpNameServer] 212.39.90.42 8.8.8.8
        Internet Explorer:
        ==================
        HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        HKU\S-1-5-21-2995889451-2405539215-1952637314-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
        SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        SearchScopes: HKU\S-1-5-21-2995889451-2405539215-1952637314-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
        BHO-x32: PDF Architect 3 Helper -> {06E08260-0695-4EC1-A74B-1310D8899D93} -> C:\Program Files (x86)\PDF Architect 3\creator-ie-helper.dll [2015-04-24] (pdfforge GmbH)
        BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03] (Adobe Systems Incorporated)
        BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-18] (Oracle Corporation)
        BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
        BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-18] (Oracle Corporation)
        BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
        Toolbar: HKLM-x32 - PDF Architect 3 Toolbar - {2DFF3579-5AA7-45B9-9328-1D38EA230861} - C:\Program Files (x86)\PDF Architect 3\creator-ie-plugin.dll [2015-04-24] (pdfforge GmbH)
        Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
        IE Session Restore: HKU\S-1-5-21-2995889451-2405539215-1952637314-1001 -> is enabled.
        FireFox:
        ========
        FF ProfilePath: C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\ZwRfThxB.default [2017-09-30]
        FF Extension: (Avira Browser Safety) - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\ZwRfThxB.default\Extensions\abs@avira.com.xpi [2017-09-08]
        FF Extension: (AdBlock) - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\ZwRfThxB.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2017-09-08]
        FF Extension: (Rikaichan Japanese-English Dictionary File) - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\ZwRfThxB.default\Extensions\rikaichan-jpen@polarcloud.com [2017-04-25]
        FF Extension: (Rikaichan) - C:\Users\Lena\AppData\Roaming\Mozilla\Firefox\Profiles\ZwRfThxB.default\Extensions\{0AA9101C-D3C1-4129-A9B7-D778C6A17F82}.xpi [2017-04-25]
        FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_3_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension
        FF Extension: (PDF Architect 3 Creator) - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension [2015-08-27] [not signed]
        FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
        FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2016-05-15] [not signed]
        FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-17] ()
        FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-17] ()
        FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
        FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
        FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-18] (Oracle Corporation)
        FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-18] (Oracle Corporation)
        FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
        FF Plugin-x32: PDF Architect 3 -> C:\Program Files (x86)\PDF Architect 3\np-previewer.dll [2015-04-24] (pdfforge GmbH)
        Chrome: 
        =======
        CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
        CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
        Opera: 
        =======
        OPR Extension: (Evernote Web Clipper) - C:\Users\Lena\AppData\Roaming\Opera Software\Opera Stable\Extensions\afgbccjghcnbcdjgogpckamibfkceahd [2017-09-24]
        OPR Extension: (AdBlock) - C:\Users\Lena\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2016-05-19]
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1128432 2017-09-01] (Avira Operations GmbH & Co. KG)
        R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [490968 2017-09-01] (Avira Operations GmbH & Co. KG)
        R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [490968 2017-09-01] (Avira Operations GmbH & Co. KG)
        S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1525240 2017-09-01] (Avira Operations GmbH & Co. KG)
        R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [404816 2017-09-13] (Avira Operations GmbH & Co. KG)
        S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
        R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135488 2017-05-21] (SurfRight B.V.)
        R2 iBtSiva; C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe [121288 2014-05-09] (Intel Corporation)
        R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282072 2014-03-18] (Intel Corporation)
        S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [File not signed]
        R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
        R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
        S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
        S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-17] ()
        R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
        S3 PDF Architect 3; C:\Program Files (x86)\PDF Architect 3\ws.exe [2244312 2015-04-24] (pdfforge GmbH)
        S3 PDF Architect 3 CrashHandler; C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe [901336 2015-04-24] (pdfforge GmbH)
        R3 PDF Architect 3 Creator; C:\Program Files (x86)\PDF Architect 3\creator-ws.exe [740568 2015-04-24] (pdfforge GmbH)
        R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1776864 2017-05-23] (Safer-Networking Ltd.)
        R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2131760 2017-05-23] (Safer-Networking Ltd.)
        R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233936 2017-05-23] (Safer-Networking Ltd.)
        S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
        R2 TransformService; C:\Program Files\ASUS\ASUS FlipLock\TransformService.exe [69776 2014-04-30] (ASUS) [File not signed]
        S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-05-17] (Microsoft Corporation)
        S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-05-17] (Microsoft Corporation)
        R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-01-17] (Intel® Corporation)
        S2 McAfee SiteAdvisor Service; "c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe" [X]
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
        R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-17] (Avira Operations GmbH & Co. KG)
        R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [176856 2017-09-01] (Avira Operations GmbH & Co. KG)
        R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-09-01] (Avira Operations GmbH & Co. KG)
        R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-24] (Avira Operations GmbH & Co. KG)
        R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-24] (Avira Operations GmbH & Co. KG)
        S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [113864 2013-07-18] (ASIX Electronics Corp.)
        R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2014-03-26] (Motorola Solutions, Inc.)
        R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1424184 2014-04-22] (Motorola Solutions, Inc.)
        R3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
        R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-08-30] (Disc Soft Ltd)
        R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-08-08] (Intel Corporation)
        R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-08-08] (Intel Corporation)
        R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [192456 2014-05-09] (Intel Corporation)
        R3 INVN_MotionApps; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
        R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
        R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
        S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
        R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
        S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83096 2015-11-25] (McAfee, Inc.)
        R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3434464 2014-03-13] (Intel Corporation)
        R3 SensorsAlsDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
        R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation)
        R3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
        R3 ST_ACCEL; C:\Windows\system32\DRIVERS\ST_Accel.sys [83456 2013-09-14] (STMicroelectronics)
        S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [35856 2014-05-17] (Microsoft Corporation)
        S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [237400 2014-05-17] (Microsoft Corporation)
        S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-05-17] (Microsoft Corporation)
        U0 msahci; system32\drivers\msahci.sys [X]
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-10-01 10:33 - 2017-10-01 10:33 - 000022799 _____ C:\Users\Lena\Desktop\FRST.txt
        2017-10-01 10:32 - 2017-10-01 10:32 - 000000000 ____D C:\Users\Lena\Desktop\FRST-OlderVersion
        2017-09-28 22:01 - 2017-09-28 22:01 - 000003122 _____ C:\Windows\System32\Tasks\Avira SystrayStartTrigger
        2017-09-24 16:12 - 2017-10-01 10:33 - 000000000 ____D C:\FRST
        2017-09-24 16:10 - 2017-10-01 10:32 - 002399744 _____ (Farbar) C:\Users\Lena\Desktop\FRST64.exe
        2017-09-16 13:33 - 2017-09-16 13:33 - 000000302 _____ C:\Users\Lena\Downloads\Viber messages.zip
        2017-09-09 16:54 - 2017-09-09 16:57 - 135026070 _____ C:\Users\Lena\Downloads\Lightning_65288__12521__12452__12488__12491__12531__12464__65289_2017_24180_02_26376__21495_Vol_274.cbr
        2017-09-09 16:54 - 2017-09-09 16:56 - 091767852 _____ C:\Users\Lena\Downloads\LDK__12456__12523__12539__12487__12451__12540__12539__12465__12540__2017_24180_05_26376__21495.cbr
        2017-09-09 16:53 - 2017-09-09 16:54 - 073898244 _____ C:\Users\Lena\Downloads\GO_OUT__12468__12540__12450__12454__12488__2017_24180_03_26376__21495.cbr
        2017-09-08 12:37 - 2017-09-08 15:56 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
        2017-09-08 12:37 - 2017-09-08 14:07 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
        2017-09-08 12:37 - 2017-09-08 12:37 - 000001409 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
        2017-09-08 12:37 - 2017-09-08 12:37 - 000000000 ____D C:\Windows\System32\Tasks\Safer-Networking
        2017-09-08 12:37 - 2017-09-08 12:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
        2017-09-08 12:37 - 2017-05-23 09:22 - 000032240 _____ (Safer-Networking Ltd.) C:\Windows\system32\sdnclean64.exe
        2017-09-08 12:04 - 2017-09-08 12:04 - 000014518 _____ C:\Users\Lena\Downloads\[avistaz.to] Double Vision (2002).torrent
        2017-09-07 12:10 - 2017-09-07 12:10 - 000479796 _____ C:\Users\Lena\Downloads\wetransfer-f2f579.zip
        2017-09-07 12:09 - 2017-09-07 12:09 - 002526579 _____ C:\Users\Lena\Downloads\FILE X PROD  PREVIEW PE18 CAPASCA.zip
        2017-09-07 12:09 - 2017-09-07 12:09 - 002526579 _____ C:\Users\Lena\Downloads\FILE X PROD  PREVIEW PE18 CAPASCA (1).zip
        2017-09-04 22:25 - 2017-09-24 15:57 - 000506398 _____ C:\Windows\system32\perfh011.dat
        2017-09-04 22:25 - 2017-09-24 15:57 - 000135664 _____ C:\Windows\system32\perfc011.dat
        2017-09-04 22:25 - 2017-09-04 22:23 - 000144476 _____ C:\Windows\system32\perfi011.dat
        2017-09-04 22:25 - 2017-09-04 22:23 - 000033362 _____ C:\Windows\system32\perfd011.dat
        2017-09-04 22:23 - 2017-09-04 22:23 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
        2017-09-04 22:23 - 2017-09-04 22:23 - 000000000 ____D C:\Windows\SysWOW64\ja
        2017-09-04 22:23 - 2017-09-04 22:23 - 000000000 ____D C:\Windows\system32\ja
        2017-09-04 22:15 - 2013-08-21 22:15 - 000248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lzhfldr2.dll
        2017-09-04 22:14 - 2013-08-22 05:30 - 000267264 _____ (Microsoft Corporation) C:\Windows\system32\lzhfldr2.dll
        2017-09-02 13:04 - 2017-09-02 20:14 - 000168550 _____ C:\Windows\ntbtlog.txt
        2017-09-01 18:25 - 2017-09-01 18:25 - 000322279 _____ C:\Users\Lena\Downloads\IPL.pdf
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-10-01 10:03 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\system32\NDF
        2017-10-01 09:09 - 2016-04-24 14:49 - 000000035 _____ C:\Users\Lena\AppData\Roaming\sp_data.sys
        2017-09-30 21:47 - 2015-10-29 12:58 - 000000000 ____D C:\Users\Lena\AppData\Roaming\vlc
        2017-09-30 21:47 - 2015-08-28 10:13 - 000000000 ____D C:\KMPlayer
        2017-09-30 10:12 - 2016-01-24 16:52 - 000022069 _____ C:\Users\Lena\Documents\Bilancio.xlsx
        2017-09-30 09:58 - 2015-08-26 16:03 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2995889451-2405539215-1952637314-1001
        2017-09-30 09:48 - 2017-06-30 19:45 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera browser.lnk
        2017-09-30 09:48 - 2015-08-27 08:12 - 000003836 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1440652343
        2017-09-30 09:48 - 2015-08-27 08:12 - 000000000 ____D C:\Program Files (x86)\Opera
        2017-09-28 22:01 - 2016-04-24 12:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
        2017-09-28 22:00 - 2014-11-02 01:29 - 000000000 ____D C:\ProgramData\Package Cache
        2017-09-24 15:58 - 2015-08-27 10:57 - 000000000 ____D C:\Users\Lena\AppData\Roaming\uTorrent
        2017-09-24 15:57 - 2014-03-18 18:25 - 001496524 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-09-24 15:57 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\Inf
        2017-09-24 15:49 - 2013-08-22 17:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
        2017-09-24 15:49 - 2013-08-22 16:25 - 000262144 ___SH C:\Windows\system32\config\BBI
        2017-09-17 14:15 - 2016-11-02 23:30 - 000000000 ____D C:\Users\Lena\Documents\ViberDownloads
        2017-09-17 13:37 - 2017-08-27 12:39 - 000000000 ____D C:\Users\Lena\AppData\Local\Viber
        2017-09-17 13:37 - 2016-11-02 23:28 - 000000000 ____D C:\Users\Lena\AppData\Roaming\ViberPC
        2017-09-10 10:36 - 2017-08-12 12:39 - 000019907 _____ C:\Users\Lena\Desktop\gaikokugo.xlsx
        2017-09-08 12:58 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\tracing
        2017-09-08 11:24 - 2017-05-20 16:38 - 000000000 ____D C:\Users\Lena\AppData\LocalLow\Mozilla
        2017-09-07 08:59 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\rescache
        2017-09-04 22:25 - 2013-08-22 18:20 - 000000000 ____D C:\Windows\CbsTemp
        2017-09-04 22:24 - 2014-03-18 18:10 - 000000000 ____D C:\Program Files\Windows Journal
        2017-09-04 22:24 - 2014-03-18 17:58 - 000000000 ____D C:\Windows\SysWOW64\winrm
        2017-09-04 22:24 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\WinStore
        2017-09-04 22:24 - 2013-08-22 18:36 - 000000000 ____D C:\Program Files\Windows Photo Viewer
        2017-09-04 22:24 - 2013-08-22 18:36 - 000000000 ____D C:\Program Files\Windows Defender
        2017-09-04 22:24 - 2013-08-22 18:36 - 000000000 ____D C:\Program Files\Common Files\System
        2017-09-04 22:24 - 2013-08-22 18:36 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
        2017-09-04 22:24 - 2013-08-22 18:36 - 000000000 ____D C:\Program Files (x86)\Windows Defender
        2017-09-04 22:24 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\oobe
        2017-09-04 22:24 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\servicing
        2017-09-04 22:23 - 2014-03-18 17:58 - 000000000 ____D C:\Windows\SysWOW64\WCN
        2017-09-04 22:23 - 2014-03-18 17:58 - 000000000 ____D C:\Windows\SysWOW64\slmgr
        2017-09-04 22:23 - 2014-03-18 17:58 - 000000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
        2017-09-04 22:23 - 2014-03-18 17:58 - 000000000 ____D C:\Windows\system32\winrm
        2017-09-04 22:23 - 2014-03-18 17:58 - 000000000 ____D C:\Windows\system32\WCN
        2017-09-04 22:23 - 2014-03-18 17:58 - 000000000 ____D C:\Windows\system32\slmgr
        2017-09-04 22:23 - 2014-03-18 17:58 - 000000000 ____D C:\Windows\system32\Printing_Admin_Scripts
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ___SD C:\Windows\system32\dsc
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\SysWOW64\MUI
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\SysWOW64\Com
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\system32\MUI
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\system32\migwiz
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\system32\Com
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\PolicyDefinitions
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\IME
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\Help
        2017-09-04 22:23 - 2013-08-22 18:36 - 000000000 ____D C:\Windows\FileManager
        2017-09-04 22:23 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Dism
        2017-09-04 22:23 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Sysprep
        2017-09-04 22:23 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\oobe
        2017-09-04 22:23 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Dism
        2017-09-03 18:52 - 2015-08-27 13:59 - 000000000 ____D C:\Users\Lena\AppData\Roaming\Skype
        2017-09-02 13:35 - 2015-10-11 16:29 - 000113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
        2017-09-02 13:08 - 2015-09-11 17:22 - 000000000 ____D C:\Users\Lena\AppData\Local\ElevatedDiagnostics
        2017-09-02 12:53 - 2015-12-04 13:24 - 000007605 _____ C:\Users\Lena\AppData\Local\Resmon.ResmonCfg
        2017-09-01 22:46 - 2016-04-24 12:14 - 000176856 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
        2017-09-01 22:46 - 2016-04-24 12:14 - 000167464 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
        2017-09-01 18:41 - 2016-01-08 09:52 - 000078312 _____ C:\Users\Lena\AppData\Local\GDIPFONTCACHEV1.DAT
        ==================== Files in the root of some directories =======
        2015-10-29 15:34 - 2015-10-29 15:53 - 000000132 _____ () C:\Users\Lena\AppData\Roaming\Adobe GIF Format CS5 Prefs
        2015-09-01 17:19 - 2016-09-12 20:09 - 000000132 _____ () C:\Users\Lena\AppData\Roaming\Adobe PNG Format CS5 Prefs
        2016-04-24 14:49 - 2017-10-01 09:09 - 000000035 _____ () C:\Users\Lena\AppData\Roaming\sp_data.sys
        2015-10-29 15:55 - 2017-05-21 17:06 - 000001456 _____ () C:\Users\Lena\AppData\Local\Adobe Save for Web 12.0 Prefs
        2015-12-04 13:24 - 2017-09-02 12:53 - 000007605 _____ () C:\Users\Lena\AppData\Local\Resmon.ResmonCfg
        2014-11-02 01:24 - 2014-11-02 01:24 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
        2014-11-02 01:39 - 2014-03-26 04:11 - 000000137 _____ () C:\ProgramData\RefreshReg.vbs
        2014-05-17 01:11 - 2014-03-26 23:50 - 000000124 _____ () C:\ProgramData\SetStretch.cmd
        2014-05-17 01:11 - 2009-07-22 13:04 - 000024576 _____ () C:\ProgramData\SetStretch.exe
        2014-05-17 01:11 - 2012-09-07 14:37 - 000000103 _____ () C:\ProgramData\SetStretch.VBS
        Files to move or delete:
        ====================
        C:\ProgramData\RefreshReg.vbs

        Some files in TEMP:
        ====================
        2016-04-24 12:15 - 2017-09-08 13:43 - 000000000 ____D () C:\Users\Lena\AppData\Local\Temp\avgnt.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\SysWOW64\explorer.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\SysWOW64\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\SysWOW64\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\SysWOW64\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-09-24 16:49
        ==================== End of FRST.txt ============================
         
        Addition.txt
      • от v3cko
        Съмнения за вирус/и - курсорът на мишката на моменти прави странни движения без да съм местил мишката , няколко пъти като съм в хром и ми се отваря интернет експлорър без да съм кликал на него
        Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-09-2017
        Ran by BECKO (administrator) on BECKO-PC (25-09-2017 12:22:36)
        Running from C:\Users\BECKO\Downloads
        Loaded Profiles: BECKO (Available Profiles: BECKO)
        Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: Български (България)
        Internet Explorer Version 11 (Default browser: Chrome)
        Boot Mode: Normal
        Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
        ==================== Processes (Whitelisted) =================
        (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
        (Lenovo.) C:\Windows\System32\ibmpmsvc.exe
        (Lenovo.) C:\Windows\System32\LPlatSvc.exe
        (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
        (Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
        (Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
        (Lenovo Group Limited) C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
        (Intel Corporation) C:\Windows\System32\igfxtray.exe
        (Intel Corporation) C:\Windows\System32\hkcmd.exe
        (Intel Corporation) C:\Windows\System32\igfxpers.exe
        (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Google Inc.) C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Intel Corporation) C:\Windows\System32\igfxext.exe
        (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        () C:\Users\BECKO\AppData\Roaming\8b5a5cb069b1cfec65bffb9aafc26fad.exe
        (Microsoft Corporation) C:\Windows\System32\schtasks.exe
        (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
        (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
        ==================== Registry (Whitelisted) ===========================
        (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
        HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1314816 2009-05-18] (Analog Devices, Inc.)
        HKLM\...\Run: [TrackPointSrv] => C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [93032 2009-11-24] (Lenovo Group Limited)
        HKU\S-1-5-21-773789430-497128755-430906800-1000\...\Run: [Win32Svc] => C:\Users\BECKO\AppData\Roaming\8b5a5cb069b1cfec65bffb9aafc26fad.exe [280064 2017-09-02] ()
        HKU\S-1-5-21-773789430-497128755-430906800-1000\...\MountPoints2: E - E:\Lenovo_Suite.exe
        HKU\S-1-5-21-773789430-497128755-430906800-1000\...\MountPoints2: {a8400ed0-8faa-11e7-863f-000000f01d00} - E:\Lenovo_Suite.exe
        Startup: C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MemSet.exe.lnk [2017-09-22]
        ShortcutTarget: MemSet.exe.lnk -> C:\Windows\MemSave\MemSet.exe ()
        ==================== Internet (Whitelisted) ====================
        (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
        Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
        Tcpip\..\Interfaces\{DAAE74CA-6078-43E6-B668-40201FAFD495}: [DhcpNameServer] 192.168.0.1
        Internet Explorer:
        ==================
        DPF: {A996E48C-D3DC-4244-89F7-AFA33EC60679} hxxps://www.dskdirect.bg/com/capicom.cab
        FireFox:
        ========
        FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-09-01] (Google Inc.)
        FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-09-01] (Google Inc.)
        Chrome: 
        =======
        CHR HomePage: Default -> hxxp://google.bg/
        CHR StartupUrls: Default -> "hxxps://www.google.bg/"
        CHR Profile: C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default [2017-09-25]
        CHR Extension: (Google Презентации) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-09-01]
        CHR Extension: (Google Документи) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-09-01]
        CHR Extension: (Google Диск) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-01]
        CHR Extension: (YouTube) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-01]
        CHR Extension: (Електронни таблици от Google) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-09-01]
        CHR Extension: (Google Документи офлайн) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-01]
        CHR Extension: (The Great Suspender) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg [2017-09-01]
        CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-01]
        CHR Extension: (Gmail) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-09-01]
        CHR Extension: (Chrome Media Router) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-01]
        ==================== Services (Whitelisted) ====================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        S2 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
        R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [258104 2016-10-07] (Intel Corporation)
        R2 LPlatSvc; C:\Windows\system32\LPlatSvc.exe [694352 2017-02-20] (Lenovo.)
        S3 VSStandardCollectorService150; C:\Program Files\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [100984 2017-08-17] (Microsoft Corporation)
        R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
        ===================== Drivers (Whitelisted) ======================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
        R3 e1express; C:\Windows\System32\DRIVERS\e1e6232.sys [232312 2012-10-30] (Intel Corporation)
        S3 monectdevices; C:\Windows\System32\DRIVERS\monectdevices.sys [14104 2013-12-03] ()
        S3 NAL; C:\Windows\system32\Drivers\iqvw32.sys [44496 2016-09-02] (Intel Corporation )
        R3 pimoukbd; C:\Windows\System32\DRIVERS\pimoukbd.sys [32664 2017-09-24] (Christian Gulden)
        R3 Tp4Track; C:\Windows\System32\DRIVERS\tp4track.sys [23152 2009-11-24] (Lenovo Group Limited)
        R3 vjoy; C:\Windows\System32\DRIVERS\vjoy.sys [50224 2016-02-03] (Shaul Eizikovich)
        R3 vmulti; C:\Windows\System32\DRIVERS\vmulti.sys [7168 2013-07-21] (Windows (R) Win 7 DDK provider) [File not signed]
        R3 WmBEnum; C:\Windows\System32\drivers\WmBEnum.sys [22856 2010-04-27] (Logitech Inc.)
        R3 WmVirHid; C:\Windows\System32\drivers\WmVirHid.sys [15048 2010-04-27] (Logitech Inc.)
        R3 WmXlCore; C:\Windows\System32\drivers\WmXlCore.sys [66632 2010-04-27] (Logitech Inc.)
        S3 VGPU; System32\drivers\rdvgkmd.sys [X]
        ==================== NetSvcs (Whitelisted) ===================
        (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

        ==================== One Month Created files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-25 12:22 - 2017-09-25 12:23 - 000010653 _____ C:\Users\BECKO\Downloads\FRST.txt
        2017-09-25 12:20 - 2017-09-25 12:22 - 000000000 ____D C:\FRST
        2017-09-25 12:19 - 2017-09-25 12:20 - 001796096 _____ (Farbar) C:\Users\BECKO\Downloads\FRST.exe
        2017-09-25 09:40 - 2017-09-25 09:41 - 055555872 _____ (Microsoft Corporation) C:\Users\BECKO\Downloads\MouseKeyboardCenter_32bit_ENG_3.0.337.exe
        2017-09-25 09:30 - 2017-09-25 09:52 - 000000000 ____D C:\Program Files\Common Files\Logitech
        2017-09-25 09:30 - 2017-09-25 09:30 - 000000000 ____D C:\Program Files\Logitech
        2017-09-25 09:28 - 2017-09-25 09:28 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Logitech
        2017-09-25 09:28 - 2017-09-25 09:28 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Logishrd
        2017-09-25 09:27 - 2017-09-25 09:28 - 015087456 _____ (Logitech Inc.) C:\Users\BECKO\Downloads\lgs510.exe
        2017-09-25 08:15 - 2017-09-25 08:15 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\NuGet
        2017-09-25 08:15 - 2017-09-25 08:15 - 000000000 ____D C:\Users\BECKO\AppData\LocalLow\Temp
        2017-09-24 19:11 - 2017-09-24 19:11 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_pimoukbd_01009.Wdf
        2017-09-24 19:09 - 2017-09-24 19:09 - 000000000 ____D C:\Users\BECKO\AppData\Local\IsolatedStorage
        2017-09-24 19:08 - 2017-09-24 19:37 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pluralinput
        2017-09-24 19:08 - 2017-09-24 19:37 - 000000000 ____D C:\Users\BECKO\AppData\Local\Pluralinput
        2017-09-24 19:08 - 2017-09-24 19:08 - 000032664 _____ (Christian Gulden) C:\Windows\system32\Drivers\pimoukbd.sys
        2017-09-24 19:07 - 2017-09-24 19:08 - 006547544 _____ (Pluralinput) C:\Users\BECKO\Downloads\PluralinputSetup.exe
        2017-09-24 18:53 - 2017-09-24 18:54 - 000000395 _____ C:\Users\BECKO\Downloads\316DAvitescfg.rar
        2017-09-24 13:16 - 2017-09-24 13:18 - 000051056 _____ C:\Users\BECKO\Downloads\NotepadMemoryWriter.zip
        2017-09-24 12:45 - 2017-09-24 12:45 - 000000000 ____D C:\Users\BECKO\source
        2017-09-24 12:44 - 2017-09-24 12:44 - 000000000 ____D C:\Users\BECKO\AppData\Local\.IdentityService
        2017-09-24 12:40 - 2017-09-24 12:56 - 000000000 ____D C:\Users\BECKO\Documents\Visual Studio 2017
        2017-09-24 12:39 - 2017-09-24 12:39 - 000000000 ____D C:\Program Files\Entity Framework Tools
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\3082
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\2052
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1055
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1049
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1046
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1045
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1042
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1041
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1040
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1036
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1033
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1031
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1029
        2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1028
        2017-09-24 12:34 - 2017-09-24 12:34 - 000000000 ____D C:\Program Files\NuGet
        2017-09-24 12:25 - 2017-09-24 12:25 - 000000000 ____D C:\Program Files\Microsoft SQL Server
        2017-09-24 12:21 - 2017-09-24 12:21 - 000000000 ____D C:\Program Files\Common Files\Designer
        2017-09-24 12:20 - 2017-09-24 12:36 - 000000000 ____D C:\Program Files\Microsoft SDKs
        2017-09-24 12:20 - 2017-09-24 12:24 - 000000000 ____D C:\Program Files\Windows Kits
        2017-09-24 12:20 - 2017-09-24 12:20 - 000004291 _____ C:\Users\BECKO\Downloads\ProcessMemoryReader.cs
        2017-09-24 12:18 - 2017-09-24 12:18 - 000001665 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2017.lnk
        2017-09-24 12:18 - 2017-09-24 12:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017
        2017-09-24 12:07 - 2017-09-24 12:07 - 000001421 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017.lnk
        2017-09-24 11:58 - 2017-09-24 11:58 - 000001236 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
        2017-09-24 11:55 - 2017-09-24 11:55 - 000000000 ____D C:\Users\BECKO\AppData\Local\ServiceHub
        2017-09-24 11:54 - 2017-09-24 12:59 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Visual Studio Setup
        2017-09-24 11:54 - 2017-09-24 12:35 - 000000000 ____D C:\Program Files\Microsoft Visual Studio
        2017-09-24 11:54 - 2017-09-24 11:56 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\vstelemetry
        2017-09-24 11:50 - 2017-09-24 11:51 - 001071352 _____ (Microsoft Corporation) C:\Users\BECKO\Downloads\vs_Community.exe
        2017-09-23 18:21 - 2017-09-23 18:21 - 000001588 _____ C:\Users\BECKO\Downloads\setups at.zip
        2017-09-23 17:40 - 2017-09-23 17:40 - 000001057 _____ C:\Users\BECKO\Desktop\LFSShifterV6.0 test - Пряк път.lnk
        2017-09-23 14:07 - 2017-09-23 14:10 - 000000000 ____D C:\LFS Shifter
        2017-09-23 14:01 - 2017-09-23 14:01 - 000867295 _____ C:\Users\BECKO\Downloads\LFS Shifter v6 test.zip
        2017-09-23 13:19 - 2017-09-23 13:19 - 000032166 _____ C:\Users\BECKO\Downloads\XRG_default.zip
        2017-09-23 13:00 - 2017-09-23 13:00 - 000009477 _____ C:\Users\BECKO\Downloads\Mufflord's Setup Pack.RAR
        2017-09-23 13:00 - 2016-10-09 14:24 - 000000132 _____ C:\Users\BECKO\Downloads\XRT_Muff Allround 5.set
        2017-09-23 13:00 - 2016-10-09 13:44 - 000000132 _____ C:\Users\BECKO\Downloads\XFR_Allround.set
        2017-09-23 13:00 - 2016-08-25 18:11 - 000000132 _____ C:\Users\BECKO\Downloads\XRT_Muff old update.set
        2017-09-23 12:34 - 2017-09-23 12:35 - 000000132 _____ C:\Users\BECKO\Downloads\XFG_205 Rallye.set
        2017-09-23 09:13 - 2017-09-23 09:19 - 001669949 _____ C:\Users\BECKO\Downloads\crsctrl.zip
        2017-09-23 09:02 - 2017-09-23 09:03 - 000000000 ____D C:\Users\BECKO\Downloads\setup
        2017-09-23 09:02 - 2017-09-23 09:02 - 000019711 _____ C:\Users\BECKO\Downloads\Real car setups.zip
        2017-09-23 08:25 - 2017-09-23 08:25 - 002996135 _____ C:\Users\BECKO\Downloads\WhelenEpsilonWhelenGamma2.rar
        2017-09-22 19:17 - 2017-09-24 19:09 - 000000000 ____D C:\Users\BECKO\AppData\Local\SquirrelTemp
        2017-09-22 19:17 - 2017-09-22 20:34 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\discord
        2017-09-22 19:17 - 2017-09-22 19:17 - 000002156 _____ C:\Users\BECKO\Desktop\Discord.lnk
        2017-09-22 19:17 - 2017-09-22 19:17 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
        2017-09-22 19:17 - 2017-09-22 19:17 - 000000000 ____D C:\Users\BECKO\AppData\Local\Discord
        2017-09-22 19:15 - 2017-09-22 19:16 - 054332920 _____ (Discord Inc.) C:\Users\BECKO\Downloads\DiscordSetup.exe
        2017-09-22 09:13 - 2017-09-22 09:13 - 000000000 ____D C:\Windows\MemSave
        2017-09-22 09:02 - 2017-09-22 09:13 - 000000000 ____D C:\Users\BECKO\Downloads\memset
        2017-09-22 09:01 - 2017-09-22 09:01 - 000409147 _____ C:\Users\BECKO\Downloads\MemSet41.zip
        2017-09-22 08:59 - 2017-09-22 08:59 - 000445630 _____ C:\Users\BECKO\Downloads\CPU-Tweaker.zip
        2017-09-22 08:47 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
        2017-09-22 08:47 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
        2017-09-22 08:47 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
        2017-09-22 08:46 - 2017-09-22 08:46 - 002353288 _____ C:\Users\BECKO\Downloads\d3dx43.exe
        2017-09-22 08:42 - 2017-09-22 08:42 - 004665640 _____ (techPowerUp (www.techpowerup.com)) C:\Users\BECKO\Downloads\GPU-Z.2.4.0.exe
        2017-09-21 19:00 - 2017-09-21 19:00 - 000000824 _____ C:\Users\BECKO\Desktop\Mary - Пряк път.lnk
        2017-09-21 17:50 - 2017-09-21 17:50 - 000095196 _____ C:\Users\BECKO\Downloads\Mary.zip
        2017-09-21 12:17 - 2012-03-09 19:10 - 000699192 _____ C:\Users\BECKO\Documents\testalloy4.dds
        2017-09-21 12:14 - 2017-09-21 12:18 - 001525785 _____ C:\Users\BECKO\Downloads\20150706193019.rar
        2017-09-21 12:09 - 2017-09-21 12:09 - 000008866 _____ C:\Users\BECKO\Downloads\rims.rar
        2017-09-21 12:07 - 2017-09-21 12:07 - 003503545 _____ C:\Users\BECKO\Downloads\Styling 7.zip
        2017-09-21 08:57 - 2017-09-21 09:00 - 072828153 _____ C:\Users\BECKO\Downloads\TC Stock Car Skins Thread Pack.rar
        2017-09-20 15:54 - 2017-09-20 15:54 - 000000000 ____D C:\Users\BECKO\My Drivers
        2017-09-20 15:54 - 2017-09-20 15:54 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Innovative Solutions
        2017-09-20 15:54 - 2017-09-20 15:54 - 000000000 ____D C:\Users\BECKO\AppData\Local\Innovative Solutions
        2017-09-20 15:54 - 2017-09-20 15:54 - 000000000 ____D C:\My Drivers
        2017-09-20 15:53 - 2017-09-20 15:53 - 003108432 _____ (Innovative Solutions) C:\Users\BECKO\Downloads\Intel-R-ICH7-M-Family-Serial-ATA-Storage-Controller---27C4-Intel-Intel-32-bits.exe
        2017-09-20 15:33 - 2017-09-20 15:55 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\DriverAgentPlus
        2017-09-20 14:59 - 2017-09-20 15:02 - 001724680 _____ ( ) C:\Users\BECKO\Downloads\cpu-z_1.80-en.exe
        2017-09-20 14:38 - 2017-09-20 14:39 - 000329753 _____ C:\Users\BECKO\Downloads\ClockGen.zip
        2017-09-20 11:30 - 2017-09-20 11:30 - 007320888 _____ C:\Users\BECKO\Downloads\200000239_93d3ef34bb13b42983099062e5adff03602d7e8b.cab
        2017-09-20 11:26 - 2017-09-20 11:47 - 000000000 ____D C:\Program Files\DriverToolkit
        2017-09-20 11:26 - 2017-09-20 11:26 - 000000000 ____D C:\Users\BECKO\AppData\Local\DriverToolkit
        2017-09-20 10:14 - 2017-09-20 10:14 - 000001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BIOS FINDER.LNK
        2017-09-20 10:14 - 2000-05-22 00:00 - 000608448 _____ (Microsoft Corporation) C:\Windows\system32\COMCTL32.OCX
        2017-09-20 10:14 - 2000-05-22 00:00 - 000115920 _____ (Microsoft Corporation) C:\Windows\system32\MSINET.OCX
        2017-09-20 10:14 - 1999-08-03 20:33 - 000205824 _____ (xyz) C:\Windows\system32\CRESIZE5.OCX
        2017-09-20 10:14 - 1997-12-16 04:00 - 000143872 _____ (Info-ZIP) C:\Windows\system32\unzip32.dll
        2017-09-20 10:14 - 1997-06-23 19:06 - 000123664 _____ (Microsoft Corporation) C:\Windows\system32\MSJInt35.dll
        2017-09-20 10:14 - 1997-06-23 19:06 - 000024848 _____ (Microsoft Corporation) C:\Windows\system32\MSJtEr35.dll
        2017-09-20 10:14 - 1995-07-25 23:00 - 000089600 _____ (Microsoft Corporation) C:\Windows\system32\GRID32.OCX
        2017-09-20 10:11 - 1998-10-15 12:04 - 001355776 _____ (Microsoft Corporation) C:\Windows\system32\MSVBVM50.dll
        2017-09-20 10:11 - 1997-01-16 01:00 - 000071680 _____ (Microsoft Corporation) C:\Windows\ST5UNST.EXE
        2017-09-20 10:11 - 1997-01-16 01:00 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\VB5StKit.dll
        2017-09-20 10:03 - 2017-09-20 10:03 - 003646301 _____ C:\Users\BECKO\Downloads\biosfind.zip
        2017-09-19 14:56 - 2017-09-19 14:56 - 000243989 _____ C:\Users\BECKO\Downloads\bmw-rins.rar
        2017-09-19 10:45 - 2010-06-17 12:02 - 000053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\system32\CSVer.dll
        2017-09-19 10:44 - 2017-09-19 10:44 - 002865688 _____ (Intel Corporation) C:\Users\BECKO\Downloads\INF_allOS_9.1.2.1008_PV.exe
        2017-09-19 10:31 - 2017-09-19 10:32 - 015647865 _____ C:\Users\BECKO\Downloads\UBU_v1_69_5.rar
        2017-09-19 10:20 - 2017-09-19 10:20 - 000000000 ____D C:\Program Files\VulkanRT
        2017-09-19 10:12 - 2017-09-19 10:15 - 257123639 _____ C:\Users\BECKO\Downloads\win64_154519.4678.zip
        2017-09-19 09:43 - 2017-09-19 09:46 - 255391032 _____ (Intel Corporation) C:\Users\BECKO\Downloads\win64_154519.4678.exe
        2017-09-19 09:39 - 2017-09-19 09:39 - 001127996 _____ C:\Users\BECKO\Downloads\Intel_Integrator_Toolkit_6.1.6.zip
        2017-09-19 09:34 - 2017-09-19 09:34 - 000099434 _____ C:\Users\BECKO\Downloads\KeplerBiosTweaker_1.27.zip
        2017-09-18 18:21 - 2017-09-18 18:22 - 000000000 ___HD C:\Windows\AxInstSV
        2017-09-18 18:14 - 2017-09-18 18:14 - 000183559 _____ C:\Users\BECKO\Downloads\capicom.cab
        2017-09-18 18:14 - 2017-09-18 18:14 - 000011073 _____ C:\Users\BECKO\Downloads\xenroll.cab
        2017-09-17 13:57 - 2017-09-17 13:57 - 001015296 _____ C:\Users\BECKO\Downloads\LAGG SWITCH_[unknowncheats.me]_.exe
        2017-09-17 13:45 - 2017-09-17 13:46 - 005251125 _____ C:\Users\BECKO\Downloads\pics.zip
        2017-09-17 11:35 - 2017-09-17 11:35 - 001546533 _____ C:\Users\BECKO\Downloads\XRT_skins.zip
        2017-09-17 10:28 - 2017-09-17 10:32 - 040811322 _____ C:\Users\BECKO\Downloads\Skins.zip
        2017-09-16 16:27 - 2017-09-16 16:27 - 000406668 _____ C:\Users\BECKO\Downloads\XRG_IDS_FAT_FLAME.pdn
        2017-09-15 17:54 - 2017-09-15 17:54 - 003889529 _____ C:\Users\BECKO\Downloads\ZenKiT By tadydrift.rar
        2017-09-15 17:53 - 2017-09-15 17:53 - 005464453 _____ C:\Users\BECKO\Downloads\Team Gripenemy pics.rar
        2017-09-15 17:53 - 2017-09-15 17:53 - 000275230 _____ C:\Users\BECKO\Downloads\Team GripEnemy.rar
        2017-09-15 17:52 - 2017-09-15 17:52 - 000246991 _____ C:\Users\BECKO\Downloads\RFactory EVOLUTION.zip
        2017-09-15 17:20 - 2017-09-15 17:20 - 004713929 _____ C:\Users\BECKO\Downloads\RFactory D1 2010 SkinPack.rar
        2017-09-15 17:10 - 2017-09-15 17:11 - 013464202 _____ C:\Users\BECKO\Downloads\RF XRT-FC kit By TaDy(update).rar
        2017-09-15 17:06 - 2017-09-15 17:06 - 000455977 _____ C:\Users\BECKO\Downloads\MEGA-texture-PACK.rar
        2017-09-15 17:04 - 2017-09-15 17:04 - 002635166 _____ C:\Users\BECKO\Downloads\XRT_Anilator_Kit_update.zip
        2017-09-15 17:03 - 2017-09-15 17:04 - 000574966 _____ C:\Users\BECKO\Downloads\ProStreet Pack 2.rar
        2017-09-12 20:42 - 2017-09-12 20:42 - 000470016 _____ C:\Users\BECKO\Downloads\Tutorial 5.5.exe
        2017-09-12 18:01 - 2017-09-12 18:01 - 000000000 ____D C:\Program Files\Microsoft Synchronization Services
        2017-09-12 18:01 - 2017-09-12 18:01 - 000000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
        2017-09-12 17:58 - 2017-09-12 17:58 - 039888608 _____ (Intel Corporation) C:\Users\BECKO\Downloads\Intel Extreme Tuning Utility (Intel XTU)-Version 6.3.0.56.exe
        2017-09-12 17:12 - 2017-09-12 17:15 - 000000000 ____D C:\ProgramData\Intel
        2017-09-12 17:10 - 2017-09-12 17:11 - 010461728 _____ (Intel) C:\Users\BECKO\Downloads\Intel Driver Update Utility Installer.exe
        2017-09-10 17:34 - 2017-09-10 17:34 - 000001314 _____ C:\Users\BECKO\Downloads\Trainer LUA.zip
        2017-09-10 17:32 - 2017-09-10 17:32 - 000000000 ____D C:\Users\BECKO\Downloads\LUA
        2017-09-10 17:31 - 2017-09-10 17:31 - 000001715 _____ C:\Users\BECKO\Downloads\Trainer LUA (UPDATED).zip
        2017-09-10 11:49 - 2017-09-10 11:50 - 001258570 _____ C:\Users\BECKO\Downloads\xfg_complete_interior.zip
        2017-09-10 08:42 - 2017-09-10 08:42 - 001065704 _____ C:\Users\BECKO\Downloads\XF_Interior1.rar
        2017-09-10 08:37 - 2017-09-10 08:37 - 004499750 _____ C:\Users\BECKO\Downloads\Retextured XRT interior.rar
        2017-09-10 07:57 - 2017-09-10 08:25 - 000935389 _____ C:\Users\BECKO\Downloads\Hub.rar
        2017-09-10 07:57 - 2017-09-10 07:57 - 001921131 _____ C:\Users\BECKO\Downloads\Grip.rar
        2017-09-10 07:38 - 2017-09-10 07:38 - 000864710 _____ C:\Users\BECKO\Downloads\LFS_S1_DECALS.rar
        2017-09-10 07:38 - 2017-09-10 07:38 - 000022769 _____ C:\Users\BECKO\Downloads\MSz_logos.rar
        2017-09-10 07:37 - 2017-09-10 07:37 - 000082377 _____ C:\Users\BECKO\Downloads\SUPER_CF.rar
        2017-09-10 07:36 - 2017-09-10 07:36 - 000414511 _____ C:\Users\BECKO\Downloads\scooppack1.zip
        2017-09-10 07:35 - 2017-09-10 07:35 - 001038380 _____ C:\Users\BECKO\Downloads\RF SKYLINES LIGHTS pack.rar
        2017-09-10 07:34 - 2017-09-10 07:34 - 000458826 _____ C:\Users\BECKO\Downloads\xfrhireslight.zip
        2017-09-09 19:59 - 2017-09-09 19:59 - 000033190 _____ C:\Users\BECKO\Downloads\Derby-decals-firebird-big.jpeg
        2017-09-09 14:43 - 2017-09-09 14:43 - 000276289 _____ C:\Users\BECKO\Downloads\TCLights2.zip
        2017-09-09 07:17 - 2017-09-09 07:17 - 000736920 _____ C:\Users\BECKO\Downloads\XRG_Cruise151.pdn
        2017-09-09 06:34 - 2017-09-09 06:34 - 000000000 ____D C:\Users\BECKO\.thumbnails
        2017-09-09 06:33 - 2017-09-09 06:34 - 000000000 ____D C:\Users\BECKO\Downloads\Blender
        2017-09-09 06:29 - 2017-09-09 06:30 - 016372630 _____ C:\Users\BECKO\Downloads\LFS_cars_ready_to_render_BLENDER.rar
        2017-09-09 06:28 - 2017-09-09 06:30 - 104647991 _____ C:\Users\BECKO\Downloads\blender-2.79-rc2-windows32.zip
        2017-09-07 21:15 - 2017-09-07 21:15 - 000902749 _____ C:\Users\BECKO\Downloads\ds-autos_lfs_maxpax-xfr.exe
        2017-09-07 21:15 - 2017-09-07 21:15 - 000000000 ____D C:\Users\BECKO\Downloads\scenes
        2017-09-07 21:15 - 2017-09-07 21:15 - 000000000 ____D C:\Users\BECKO\Downloads\images
        2017-09-07 19:09 - 2017-09-07 19:09 - 000544670 _____ C:\Users\BECKO\Downloads\XFG_interior.zip
        2017-09-07 19:09 - 2017-09-07 19:09 - 000116050 _____ C:\Users\BECKO\Downloads\XRG_interior.zip
        2017-09-07 19:06 - 2017-09-07 19:06 - 000515238 _____ C:\Users\BECKO\Downloads\XFG. XFR leather interior.rar
        2017-09-07 19:01 - 2017-09-07 19:01 - 000325761 _____ C:\Users\BECKO\Downloads\XR_LED_lights_by_Kancel.rar
        2017-09-07 18:11 - 2017-09-25 09:52 - 000000000 ____D C:\Windows\system32\appmgmt
        2017-09-07 05:05 - 2017-09-07 05:05 - 000933207 _____ C:\Users\BECKO\Downloads\Ford_Sierra_Cosworth_Texturepack.rar
        2017-09-06 20:45 - 2017-09-06 20:45 - 000013841 _____ C:\Users\BECKO\Downloads\shaders-20170906T174421Z-001.zip
        2017-09-06 20:43 - 2017-09-06 20:43 - 016777344 _____ C:\Users\BECKO\Downloads\s_window_ALP.dds
        2017-09-06 17:57 - 2017-09-06 17:58 - 001305367 _____ C:\Users\BECKO\Downloads\Autoruns.zip
        2017-09-05 18:48 - 2017-09-05 18:48 - 000000000 ____D C:\ProgramData\Force Dynamics
        2017-09-05 18:45 - 2017-09-19 10:45 - 000000000 ____D C:\Program Files\Intel
        2017-09-05 18:45 - 2016-10-08 02:29 - 000002291 ____N C:\Windows\system32\SetupBD.din
        2017-09-05 18:41 - 2016-10-08 02:29 - 000370752 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
        2017-09-05 18:24 - 2017-09-05 18:24 - 000014200 _____ C:\Windows\system32\results.xml
        2017-09-05 18:20 - 2017-09-05 18:20 - 000000000 ____D C:\Windows\system32\Lang
        2017-09-05 18:20 - 2009-10-19 15:57 - 001002008 _____ (Intel Corporation) C:\Windows\system32\igxpun.exe
        2017-09-05 18:19 - 2017-09-05 18:19 - 023812912 _____ (Intel Corporation) C:\Users\BECKO\Downloads\win7_1512754.exe
        2017-09-04 19:39 - 2017-09-04 19:46 - 550935208 _____ (Live for Speed) C:\Users\BECKO\Downloads\LFS_S3_6R_setup (1).exe
        2017-09-04 18:54 - 2012-02-11 08:37 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
        2017-09-04 18:52 - 2014-07-09 04:29 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
        2017-09-04 18:52 - 2014-07-09 04:29 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
        2017-09-04 18:52 - 2014-07-09 04:29 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
        2017-09-04 18:52 - 2014-07-09 04:29 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
        2017-09-04 18:52 - 2014-07-09 04:29 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
        2017-09-04 18:49 - 2017-03-07 18:06 - 002746880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
        2017-09-04 18:49 - 2017-03-07 18:06 - 000221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
        2017-09-04 18:49 - 2017-03-07 18:06 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
        2017-09-04 18:49 - 2016-08-16 23:27 - 000259072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
        2017-09-04 18:49 - 2016-08-16 23:27 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
        2017-09-04 18:49 - 2016-08-16 23:26 - 000285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
        2017-09-04 18:49 - 2016-08-16 23:26 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
        2017-09-04 18:49 - 2016-08-16 23:26 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
        2017-09-04 18:49 - 2016-08-16 23:26 - 000020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
        2017-09-04 18:49 - 2016-08-16 23:26 - 000006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
        2017-09-04 03:21 - 2015-07-16 22:12 - 006131200 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
        2017-09-04 03:21 - 2015-07-16 22:12 - 000856064 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
        2017-09-04 03:21 - 2015-07-16 22:12 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
        2017-09-04 03:21 - 2015-07-16 18:14 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
        2017-09-04 03:21 - 2014-12-11 20:47 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
        2017-09-03 19:56 - 2017-09-03 19:57 - 000000000 ____D C:\Program Files\vJoy
        2017-09-03 19:56 - 2017-09-03 19:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\vJoy
        2017-09-03 19:43 - 2016-02-03 12:23 - 000050224 _____ (Shaul Eizikovich) C:\Windows\system32\Drivers\vjoy.sys
        2017-09-03 19:42 - 2017-09-03 19:42 - 007126695 _____ C:\Users\BECKO\Downloads\Receiver2017 EditorVersion.rar
        2017-09-03 16:51 - 2017-09-04 20:02 - 000000534 _____ C:\Users\BECKO\Desktop\LFS.lnk
        2017-09-03 16:51 - 2017-09-03 16:51 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed
        2017-09-03 16:41 - 2017-09-25 11:46 - 000000000 ____D C:\LFS
        2017-09-03 16:29 - 2017-01-29 07:43 - 550935208 _____ (Live for Speed) C:\Users\BECKO\Downloads\LFS_S3_6R_setup.exe
        2017-09-03 15:11 - 2017-09-03 15:11 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsigndfefe19eac837ef9
        2017-09-03 15:08 - 2017-09-03 15:08 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign453dc60071486f6d
        2017-09-03 15:03 - 2017-09-03 15:03 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign9f0a8a46786c1d6c
        2017-09-03 15:03 - 2017-09-03 15:03 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign6074fc35e5b4c48d
        2017-09-03 13:33 - 2017-09-03 13:33 - 000001410 _____ C:\Users\BECKO\Desktop\PaintDotNet - Пряк път.lnk
        2017-09-03 13:32 - 2017-09-03 14:17 - 000000000 ____D C:\Users\BECKO\AppData\Local\paint.net
        2017-09-03 13:24 - 2017-09-03 13:24 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign6b42f544879c7727
        2017-09-03 13:23 - 2017-09-03 13:23 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsignf781ccea0b6f3d93
        2017-09-03 13:23 - 2017-09-03 13:23 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign1e69207d3443abe6
        2017-09-03 12:49 - 2017-09-03 13:21 - 000001498 _____ C:\Users\BECKO\Desktop\Cheat Engine - Пряк път.lnk
        2017-09-03 11:29 - 2017-09-23 13:12 - 000000579 _____ C:\Users\BECKO\Documents\shiftercfg.ini
        2017-09-03 10:13 - 2017-09-03 10:13 - 000119081 _____ C:\Users\BECKO\Downloads\[LCS] Lights.zip
        2017-09-03 08:28 - 2017-09-03 08:28 - 046428288 _____ C:\Users\BECKO\Downloads\Spot Healing Brush.psd
        2017-09-03 08:23 - 2017-09-03 08:23 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign64eab49f8c2e8f70
        2017-09-03 08:07 - 2017-09-03 08:07 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign8451f807890aeee4
        2017-09-03 08:01 - 2017-09-03 08:01 - 000000000 ____D C:\Users\BECKO\AppData\LocalLow\Adobe
        2017-09-03 07:57 - 2017-09-03 07:57 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign632ee564d36a89a5
        2017-09-03 07:56 - 2017-09-03 07:56 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign09a43f07e233face
        2017-09-03 07:55 - 2017-09-03 07:55 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign8b9b2ea2429d6807
        2017-09-03 07:55 - 2017-09-03 07:55 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign84c5d6b8cab802da
        2017-09-03 07:54 - 2017-09-03 07:54 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
        2017-09-03 07:52 - 2017-09-03 07:52 - 000000000 ____D C:\Users\BECKO\Documents\Adobe
        2017-09-03 07:37 - 2017-09-03 17:21 - 000000000 ___RD C:\Users\BECKO\Creative Cloud Files
        2017-09-03 07:28 - 2017-09-03 07:28 - 000000000 ____D C:\Users\BECKO\AppData\Local\CEF
        2017-09-03 03:29 - 2017-09-03 03:30 - 000000000 ___SD C:\Windows\system32\CompatTel
        2017-09-03 03:29 - 2017-09-03 03:29 - 000000000 ____D C:\Windows\system32\appraiser
        2017-09-02 23:43 - 2012-08-23 17:46 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\terminpt.sys
        2017-09-02 23:43 - 2012-08-23 17:44 - 000014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
        2017-09-02 23:43 - 2012-08-23 14:12 - 000192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
        2017-09-02 23:23 - 2013-10-02 02:45 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
        2017-09-02 23:22 - 2013-10-02 03:42 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
        2017-09-02 23:22 - 2013-10-02 03:32 - 000012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
        2017-09-02 23:22 - 2013-10-02 03:30 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
        2017-09-02 23:22 - 2013-10-02 03:14 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
        2017-09-02 23:22 - 2013-10-02 03:14 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
        2017-09-02 23:22 - 2013-10-02 01:34 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
        2017-09-02 23:14 - 2017-09-02 23:18 - 000000000 ____D C:\Windows\system32\MRT
        2017-09-02 23:14 - 2017-09-02 23:14 - 137505280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
        2017-09-02 23:02 - 2017-09-02 23:02 - 000000000 ____D C:\Program Files\CONEXANT
        2017-09-02 22:50 - 2017-09-02 22:50 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_tp4track_01009.Wdf
        2017-09-02 22:50 - 2017-09-02 22:50 - 000000000 ____D C:\Program Files\Lenovo
        2017-09-02 22:42 - 2012-07-26 06:21 - 000196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
        2017-09-02 22:42 - 2012-07-26 06:20 - 000613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
        2017-09-02 22:42 - 2012-07-26 06:20 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
        2017-09-02 22:42 - 2012-07-26 06:20 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
        2017-09-02 22:42 - 2012-07-26 06:20 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
        2017-09-02 22:42 - 2012-07-26 05:33 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
        2017-09-02 22:42 - 2012-07-26 05:32 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
        2017-09-02 22:42 - 2012-06-02 17:57 - 000000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
        2017-09-02 22:30 - 2017-04-28 01:50 - 003550208 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
        2017-09-02 22:19 - 2015-12-16 21:43 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
        2017-09-02 22:19 - 2015-12-16 21:43 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
        2017-09-02 22:19 - 2015-12-16 21:43 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
        2017-09-02 22:18 - 2016-03-16 21:28 - 000176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
        2017-09-02 22:18 - 2016-03-16 21:28 - 000111616 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
        2017-09-02 22:18 - 2015-08-05 20:40 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
        2017-09-02 22:18 - 2015-08-05 19:58 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
        2017-09-02 22:18 - 2015-07-22 20:53 - 000635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
        2017-09-02 22:18 - 2015-05-25 21:01 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
        2017-09-02 22:18 - 2015-05-25 21:00 - 000364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
        2017-09-02 22:18 - 2015-05-25 21:00 - 000082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
        2017-09-02 22:18 - 2015-05-25 21:00 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
        2017-09-02 22:18 - 2015-05-25 21:00 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
        2017-09-02 22:18 - 2015-05-25 21:00 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
        2017-09-02 22:18 - 2015-01-09 05:48 - 000635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
        2017-09-02 22:18 - 2015-01-09 05:48 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
        2017-09-02 22:18 - 2015-01-09 05:48 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
        2017-09-02 22:18 - 2012-12-07 15:26 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
        2017-09-02 22:18 - 2012-12-07 15:20 - 002576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
        2017-09-02 22:18 - 2012-12-07 13:46 - 000055296 _____ (Microsoft) C:\Windows\system32\cero.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000030720 _____ (Microsoft) C:\Windows\system32\usk.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000021504 _____ (Microsoft) C:\Windows\system32\grb.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
        2017-09-02 22:18 - 2012-12-07 13:46 - 000015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
        2017-09-02 22:17 - 2016-08-29 17:55 - 002972672 _____ (Microsoft Corporation) C:\Windows\explorer.exe
        2017-09-02 22:17 - 2012-10-03 19:42 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
        2017-09-02 22:17 - 2012-10-03 19:42 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
        2017-09-02 22:17 - 2012-10-03 19:40 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
        2017-09-02 22:17 - 2012-08-21 23:12 - 000245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
        2017-09-02 22:17 - 2011-03-11 08:39 - 000143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
        2017-09-02 22:17 - 2011-03-11 08:39 - 000117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
        2017-09-02 22:17 - 2011-03-11 08:38 - 000332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
        2017-09-02 22:17 - 2011-03-11 08:38 - 000080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
        2017-09-02 22:17 - 2011-03-11 08:38 - 000022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
        2017-09-02 22:17 - 2011-03-11 08:33 - 001699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
        2017-09-02 22:17 - 2011-03-11 08:31 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
        2017-09-02 22:16 - 2016-07-07 17:57 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
        2017-09-02 22:16 - 2016-03-09 21:40 - 000316416 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
        2017-09-02 22:16 - 2016-03-09 21:34 - 000216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
        2017-09-02 22:16 - 2016-02-05 21:44 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
        2017-09-02 22:16 - 2016-02-05 20:33 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
        2017-09-02 22:16 - 2015-10-29 20:50 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
        2017-09-02 22:16 - 2015-10-29 20:49 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
        2017-09-02 22:16 - 2015-10-29 20:49 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
        2017-09-02 22:16 - 2015-10-29 20:49 - 000020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
        2017-09-02 22:16 - 2015-08-27 20:58 - 001391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
        2017-09-02 22:16 - 2015-08-27 20:51 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
        2017-09-02 22:16 - 2015-07-09 20:42 - 001372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
        2017-09-02 22:16 - 2015-07-09 20:42 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
        2017-09-02 22:16 - 2015-06-03 23:22 - 000355456 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
        2017-09-02 22:16 - 2015-01-29 06:02 - 002311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
        2017-09-02 22:16 - 2014-08-01 14:35 - 000793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
        2017-09-02 22:16 - 2014-02-04 05:07 - 000234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
        2017-09-02 22:16 - 2014-02-04 05:07 - 000149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
        2017-09-02 22:16 - 2014-02-04 05:07 - 000027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
        2017-09-02 22:16 - 2014-02-04 05:00 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
        2017-09-02 22:16 - 2014-01-28 05:07 - 000185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
        2017-09-02 22:16 - 2013-10-30 05:19 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
        2017-09-02 22:16 - 2013-10-04 04:58 - 000152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
        2017-09-02 22:16 - 2013-10-04 04:56 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
        2017-09-02 22:16 - 2013-05-10 06:20 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
        2017-09-02 22:16 - 2013-03-19 06:33 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
        2017-09-02 22:16 - 2013-01-24 07:47 - 000196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
        2017-09-02 22:16 - 2012-07-04 22:45 - 000033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
        2017-09-02 22:16 - 2011-02-18 08:39 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
        2017-09-02 22:15 - 2017-07-21 17:26 - 000518144 _____ C:\Windows\system32\msjetoledb40.dll
        2017-09-02 22:15 - 2017-07-21 17:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll
        2017-09-02 22:15 - 2017-07-15 20:52 - 000346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
        2017-09-02 22:15 - 2017-07-14 06:01 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
        2017-09-02 22:15 - 2017-07-14 06:00 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
        2017-09-02 22:15 - 2017-07-14 05:54 - 020270080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
        2017-09-02 22:15 - 2017-07-14 05:48 - 000499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
        2017-09-02 22:15 - 2017-07-14 05:48 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
        2017-09-02 22:15 - 2017-07-14 05:48 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
        2017-09-02 22:15 - 2017-07-14 05:48 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
        2017-09-02 22:15 - 2017-07-14 05:47 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
        2017-09-02 22:15 - 2017-07-14 05:44 - 002290176 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
        2017-09-02 22:15 - 2017-07-14 05:42 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
        2017-09-02 22:15 - 2017-07-14 05:41 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
        2017-09-02 22:15 - 2017-07-14 05:39 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
        2017-09-02 22:15 - 2017-07-14 05:38 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
        2017-09-02 22:15 - 2017-07-14 05:38 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
        2017-09-02 22:15 - 2017-07-14 05:38 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
        2017-09-02 22:15 - 2017-07-14 05:38 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
        2017-09-02 22:15 - 2017-07-14 05:33 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
        2017-09-02 22:15 - 2017-07-14 05:30 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
        2017-09-02 22:15 - 2017-07-14 05:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
        2017-09-02 22:15 - 2017-07-14 05:25 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
        2017-09-02 22:15 - 2017-07-14 05:25 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
        2017-09-02 22:15 - 2017-07-14 05:23 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
        2017-09-02 22:15 - 2017-07-14 05:22 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
        2017-09-02 22:15 - 2017-07-14 05:21 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
        2017-09-02 22:15 - 2017-07-14 05:20 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
        2017-09-02 22:15 - 2017-07-14 05:17 - 004546048 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
        2017-09-02 22:15 - 2017-07-14 05:13 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
        2017-09-02 22:15 - 2017-07-14 05:12 - 000693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
        2017-09-02 22:15 - 2017-07-14 05:12 - 000689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
        2017-09-02 22:15 - 2017-07-14 05:11 - 002057216 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
        2017-09-02 22:15 - 2017-07-14 05:11 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
        2017-09-02 22:15 - 2017-07-14 05:09 - 013663744 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
        2017-09-02 22:15 - 2017-07-14 04:53 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
        2017-09-02 22:15 - 2017-07-14 04:50 - 001314816 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
        2017-09-02 22:15 - 2017-07-14 04:48 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
        2017-09-02 22:15 - 2017-07-01 16:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll
        2017-09-02 22:15 - 2017-07-01 16:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll
        2017-09-02 22:15 - 2017-07-01 16:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll
        2017-09-02 22:15 - 2017-07-01 16:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll
        2017-09-02 22:15 - 2017-05-12 19:25 - 001251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
        2017-09-02 22:15 - 2017-05-12 19:25 - 000909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
        2017-09-02 22:15 - 2017-05-10 18:12 - 012880896 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
        2017-09-02 22:15 - 2017-05-10 18:12 - 002953216 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
        2017-09-02 22:15 - 2017-05-10 18:12 - 000174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
        2017-09-02 22:15 - 2017-05-10 18:10 - 000073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
        2017-09-02 22:15 - 2017-05-10 18:01 - 002092032 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
        2017-09-02 22:15 - 2017-05-10 18:00 - 000573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
        2017-09-02 22:15 - 2017-05-10 18:00 - 000136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
        2017-09-02 22:15 - 2017-05-10 18:00 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
        2017-09-02 22:15 - 2017-05-10 18:00 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
        2017-09-02 22:15 - 2017-01-18 18:35 - 000922432 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
        2017-09-02 22:15 - 2017-01-18 18:35 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
        2017-09-02 22:15 - 2016-11-09 19:17 - 002365440 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
        2017-09-02 22:15 - 2016-09-15 17:51 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
        2017-09-02 22:15 - 2016-08-21 16:05 - 000935424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
        2017-09-02 22:15 - 2016-08-12 19:47 - 011410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
        2017-09-02 22:15 - 2016-06-14 18:21 - 003209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
        2017-09-02 22:15 - 2016-06-14 18:21 - 000988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
        2017-09-02 22:15 - 2016-06-14 18:21 - 000744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
        2017-09-02 22:15 - 2016-01-21 03:51 - 000057280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
        2017-09-02 22:15 - 2015-04-11 06:07 - 000054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
        2017-09-02 22:15 - 2014-10-30 04:45 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
        2017-09-02 22:15 - 2013-08-05 04:56 - 000133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
        2017-09-02 22:15 - 2012-01-04 11:58 - 000442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
        2017-09-02 22:15 - 2011-12-30 08:27 - 000478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
        2017-09-02 22:15 - 2011-06-16 07:33 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
        2017-09-02 22:14 - 2017-08-01 18:16 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
        2017-09-02 22:14 - 2017-07-29 17:50 - 000074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
        2017-09-02 22:14 - 2017-07-21 17:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll
        2017-09-02 22:14 - 2017-07-21 17:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 001400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 000104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
        2017-09-02 22:14 - 2017-07-14 18:10 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
        2017-09-02 22:14 - 2017-07-14 18:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
        2017-09-02 22:14 - 2017-07-14 18:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
        2017-09-02 22:14 - 2017-07-14 17:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
        2017-09-02 22:14 - 2017-07-14 17:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
        2017-09-02 22:14 - 2017-07-14 17:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
        2017-09-02 22:14 - 2017-07-14 17:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
        2017-09-02 22:14 - 2017-07-08 18:19 - 000250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
        2017-09-02 22:14 - 2017-07-08 17:51 - 002402816 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
        2017-09-02 22:14 - 2017-07-07 18:15 - 004001000 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
        2017-09-02 22:14 - 2017-07-07 18:15 - 003945192 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
        2017-09-02 22:14 - 2017-07-07 18:15 - 000296680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
        2017-09-02 22:14 - 2017-07-07 18:15 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
        2017-09-02 22:14 - 2017-07-07 18:15 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
        2017-09-02 22:14 - 2017-07-07 18:13 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
        2017-09-02 22:14 - 2017-07-07 18:11 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
        2017-09-02 22:14 - 2017-07-07 18:10 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
        2017-09-02 22:14 - 2017-07-07 17:52 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
        2017-09-02 22:14 - 2017-07-07 17:52 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
        2017-09-02 22:14 - 2017-07-07 17:52 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
        2017-09-02 22:14 - 2017-07-07 17:52 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
        2017-09-02 22:14 - 2017-07-07 17:51 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
        2017-09-02 22:14 - 2017-07-07 17:50 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
        2017-09-02 22:14 - 2017-07-07 17:48 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
        2017-09-02 22:14 - 2017-07-07 17:48 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
        2017-09-02 22:14 - 2017-07-07 17:48 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
        2017-09-02 22:14 - 2017-07-07 17:47 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
        2017-09-02 22:14 - 2017-07-07 17:47 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
        2017-09-02 22:14 - 2017-07-07 17:47 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
        2017-09-02 22:14 - 2017-07-07 17:47 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
        2017-09-02 22:14 - 2017-07-01 16:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll
        2017-09-02 22:14 - 2017-07-01 16:05 - 000641536 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
        2017-09-02 22:14 - 2017-07-01 16:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll
        2017-09-02 22:14 - 2017-07-01 16:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll
        2017-09-02 22:14 - 2017-07-01 16:05 - 000339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
        2017-09-02 22:14 - 2017-07-01 16:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll
        2017-09-02 22:14 - 2017-07-01 16:05 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
        2017-09-02 22:14 - 2017-07-01 16:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll
        2017-09-02 22:14 - 2017-06-15 23:18 - 000514048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
        2017-09-02 22:14 - 2017-06-13 01:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
        2017-09-02 22:14 - 2017-06-13 01:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
        2017-09-02 22:14 - 2017-06-13 01:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
        2017-09-02 22:14 - 2017-06-13 01:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
        2017-09-02 22:14 - 2017-06-13 01:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
        2017-09-02 22:14 - 2017-06-13 01:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
        2017-09-02 22:14 - 2017-06-13 01:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
        2017-09-02 22:14 - 2017-06-10 18:39 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
        2017-09-02 22:14 - 2017-06-09 18:17 - 001213672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
        2017-09-02 22:14 - 2017-06-06 18:12 - 001499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
        2017-09-02 22:14 - 2017-06-02 10:57 - 000497152 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
        2017-09-02 22:14 - 2017-05-30 07:39 - 001309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
        2017-09-02 22:14 - 2017-05-30 07:39 - 000240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
        2017-09-02 22:14 - 2017-05-30 07:39 - 000187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
        2017-09-02 22:14 - 2017-05-21 07:06 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
        2017-09-02 22:14 - 2017-05-16 18:16 - 000730856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
        2017-09-02 22:14 - 2017-05-16 18:16 - 000218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
        2017-09-02 22:14 - 2017-05-16 18:12 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
        2017-09-02 22:14 - 2017-05-12 21:07 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
        2017-09-02 22:14 - 2017-05-12 21:03 - 000629760 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
        2017-09-02 22:14 - 2017-05-12 21:03 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
        2017-09-02 22:14 - 2017-05-12 21:03 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
        2017-09-02 22:14 - 2017-05-12 21:03 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
        2017-09-02 22:14 - 2017-05-12 21:03 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
        2017-09-02 22:14 - 2017-05-12 20:43 - 000034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
        2017-09-02 22:14 - 2017-05-10 18:16 - 000091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
        2017-09-02 22:14 - 2017-05-10 18:00 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
        2017-09-02 22:14 - 2017-05-10 18:00 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
        2017-09-02 22:14 - 2017-05-10 18:00 - 000011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
        2017-09-02 22:14 - 2017-05-09 18:11 - 000779776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
        2017-09-02 22:14 - 2017-05-09 18:01 - 000066048 _____ C:\Windows\system32\PrintBrmUi.exe
        2017-09-02 22:14 - 2017-05-07 18:14 - 000078568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
        2017-09-02 22:14 - 2017-05-07 17:53 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
        2017-09-02 22:14 - 2017-04-21 18:15 - 000805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 001417728 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000581632 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000377344 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 17:54 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
        2017-09-02 22:14 - 2017-04-17 17:51 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
        2017-09-02 22:14 - 2017-04-17 17:48 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 17:48 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 17:48 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-17 17:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
        2017-09-02 22:14 - 2017-04-12 18:26 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
        2017-09-02 22:14 - 2017-04-12 18:25 - 001176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
        2017-09-02 22:14 - 2017-04-12 18:25 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
        2017-09-02 22:14 - 2017-04-12 18:25 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
        2017-09-02 22:14 - 2017-04-05 18:00 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
        2017-09-02 22:14 - 2017-04-05 18:00 - 000311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
        2017-09-02 22:14 - 2017-04-05 18:00 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
        2017-09-02 22:14 - 2017-04-04 17:52 - 000338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
        2017-09-02 22:14 - 2017-03-30 17:58 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
        2017-09-02 22:14 - 2017-03-10 19:20 - 001508352 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
        2017-09-02 22:14 - 2017-03-10 19:20 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
        2017-09-02 22:14 - 2017-03-10 18:52 - 000007680 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
        2017-09-02 22:14 - 2017-03-10 18:51 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
        2017-09-02 22:14 - 2017-03-10 18:51 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
        2017-09-02 22:14 - 2017-03-07 19:17 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
        2017-09-02 22:14 - 2017-03-04 04:14 - 001329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
        2017-09-02 22:14 - 2017-03-04 04:14 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
        2017-09-02 22:14 - 2017-02-09 19:14 - 000575488 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
        2017-09-02 22:14 - 2017-02-09 19:14 - 000481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
        2017-09-02 22:14 - 2017-02-09 19:14 - 000215040 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
        2017-09-02 22:14 - 2017-02-09 19:14 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
        2017-09-02 22:14 - 2017-02-09 18:51 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
        2017-09-02 22:14 - 2017-01-13 20:45 - 000741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
        2017-09-02 22:14 - 2017-01-13 20:45 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
        2017-09-02 22:14 - 2017-01-11 20:43 - 001241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
        2017-09-02 22:14 - 2017-01-11 20:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
        2017-09-02 22:14 - 2016-11-20 19:19 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
        2017-09-02 22:14 - 2016-11-20 17:07 - 000373896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
        2017-09-02 22:14 - 2016-11-10 19:19 - 000811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
        2017-09-02 22:14 - 2016-11-09 19:24 - 000105192 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
        2017-09-02 22:14 - 2016-11-09 19:17 - 001806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
        2017-09-02 22:14 - 2016-11-09 19:17 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
        2017-09-02 22:14 - 2016-11-09 19:17 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
        2017-09-02 22:14 - 2016-11-09 19:17 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
        2017-09-02 22:14 - 2016-11-09 18:55 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
        2017-09-02 22:14 - 2016-10-11 18:18 - 001027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
        2017-09-02 22:14 - 2016-10-11 18:18 - 000829952 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
        2017-09-02 22:14 - 2016-10-11 18:18 - 000701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
        2017-09-02 22:14 - 2016-10-11 18:18 - 000430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
        2017-09-02 22:14 - 2016-10-11 18:18 - 000202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
        2017-09-02 22:14 - 2016-10-11 18:18 - 000126976 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
        2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
        2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
        2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
        2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
        2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
        2017-09-02 22:14 - 2016-10-11 18:18 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
        2017-09-02 22:14 - 2016-10-11 18:18 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
        2017-09-02 22:14 - 2016-10-11 17:51 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
        2017-09-02 22:14 - 2016-10-11 16:33 - 000187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
        2017-09-02 22:14 - 2016-10-11 16:18 - 000419648 _____ C:\Windows\system32\locale.nls
        2017-09-02 22:14 - 2016-10-08 16:05 - 000534600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
        2017-09-02 22:14 - 2016-10-07 18:12 - 002291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
        2017-09-02 22:14 - 2016-10-07 18:12 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
        2017-09-02 22:14 - 2016-10-05 17:50 - 000068608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
        2017-09-02 22:14 - 2016-09-12 23:49 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
        2017-09-02 22:14 - 2016-09-08 23:34 - 000208896 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
        2017-09-02 22:14 - 2016-09-08 23:34 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
        2017-09-02 22:14 - 2016-09-08 17:49 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
        2017-09-02 22:14 - 2016-09-08 17:49 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
        2017-09-02 22:14 - 2016-08-12 19:47 - 012574208 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
        2017-09-02 22:14 - 2016-08-12 19:31 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
        2017-09-02 22:14 - 2016-08-12 19:31 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
        2017-09-02 22:14 - 2016-08-12 19:31 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
        2017-09-02 22:14 - 2016-08-12 19:21 - 000437248 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
        2017-09-02 22:14 - 2016-08-06 18:15 - 001178112 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
        2017-09-02 22:14 - 2016-08-06 18:15 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
        2017-09-02 22:14 - 2016-08-06 18:15 - 000214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
        2017-09-02 22:14 - 2016-08-06 18:15 - 000146944 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
        2017-09-02 22:14 - 2016-08-06 18:15 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
        2017-09-02 22:14 - 2016-08-06 17:53 - 000199168 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
        2017-09-02 22:14 - 2016-08-06 17:53 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
        2017-09-02 22:14 - 2016-08-06 17:53 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 001005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000474624 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000442368 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000195072 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000080896 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
        2017-09-02 22:14 - 2016-06-14 18:21 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
        2017-09-02 22:14 - 2016-06-14 18:17 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
        2017-09-02 22:14 - 2016-06-14 18:05 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
        2017-09-02 22:14 - 2016-06-14 18:05 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
        2017-09-02 22:14 - 2016-06-14 18:05 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
        2017-09-02 22:14 - 2016-06-14 17:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
        2017-09-02 22:14 - 2016-06-14 17:55 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
        2017-09-02 22:14 - 2016-06-14 17:54 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
        2017-09-02 22:14 - 2016-05-12 16:04 - 000249352 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
        2017-09-02 22:14 - 2016-03-24 01:42 - 000409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
        2017-09-02 22:14 - 2016-03-24 01:39 - 000470704 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
        2017-09-02 22:13 - 2012-10-09 20:40 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
        2017-09-02 22:13 - 2012-10-09 20:40 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
        2017-09-02 22:01 - 2017-05-03 18:15 - 000081640 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
        2017-09-02 22:01 - 2017-05-03 18:10 - 000987648 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
        2017-09-02 22:01 - 2017-05-03 16:05 - 001327616 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
        2017-09-02 22:01 - 2017-05-03 16:05 - 000505856 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
        2017-09-02 22:01 - 2017-05-03 16:05 - 000446464 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
        2017-09-02 22:01 - 2017-05-03 16:05 - 000275456 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
        2017-09-02 22:01 - 2017-05-03 16:05 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
        2017-09-02 22:01 - 2017-05-03 16:05 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
        2017-09-02 22:01 - 2017-05-03 16:05 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
        2017-09-02 22:01 - 2017-03-23 05:06 - 001602048 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
        2017-09-02 21:24 - 2013-12-04 05:03 - 000428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
        2017-09-02 21:24 - 2013-12-04 05:03 - 000423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
        2017-09-02 21:24 - 2013-12-04 05:03 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
        2017-09-02 21:24 - 2013-12-04 05:03 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
        2017-09-02 21:24 - 2013-12-04 05:02 - 000390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
        2017-09-02 21:24 - 2013-12-04 04:54 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
        2017-09-02 21:24 - 2013-12-04 04:54 - 000572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
        2017-09-02 21:24 - 2013-12-04 04:54 - 000510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
        2017-09-02 21:24 - 2013-12-04 04:54 - 000508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
        2017-09-02 18:47 - 2017-09-02 18:47 - 000386758 _____ C:\Users\BECKO\Downloads\XR_Interior1(yeni)(2).rar
        2017-09-02 18:41 - 2017-09-03 17:28 - 000000000 ____D C:\ProgramData\Adobe
        2017-09-02 18:40 - 2017-09-03 17:28 - 000000000 ____D C:\Program Files\Common Files\Adobe
        2017-09-02 18:37 - 2017-09-03 17:21 - 000000000 ____D C:\Users\BECKO\AppData\Local\Adobe
        2017-09-02 18:36 - 2017-09-02 18:36 - 000814168 _____ (Adobe Systems Incorporated) C:\Users\BECKO\Downloads\CreativeCloudSet-Up.exe
        2017-09-02 18:34 - 2017-09-03 15:54 - 048763957 _____ C:\Users\BECKO\Downloads\XRT_Publicpack.psd
        2017-09-02 17:36 - 2013-11-26 11:16 - 003419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
        2017-09-02 10:43 - 2017-09-02 10:43 - 000001689 _____ C:\Users\BECKO\Desktop\jpg2dds - Пряк път.lnk
        2017-09-02 10:41 - 2017-09-02 10:41 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Easy2Convert
        2017-09-02 10:34 - 2017-09-02 10:34 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\WinRAR
        2017-09-02 10:34 - 2017-09-02 10:34 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
        2017-09-02 10:34 - 2017-09-02 10:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
        2017-09-02 10:32 - 2017-09-02 10:32 - 000933207 _____ C:\Users\BECKO\Downloads\Ford Sierra Cosworth Texturepack.rar
        2017-09-02 10:29 - 2016-04-14 16:49 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
        2017-09-02 10:29 - 2016-04-09 07:20 - 001230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
        2017-09-02 10:10 - 2015-07-30 20:57 - 001987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
        2017-09-02 10:07 - 2015-12-09 00:54 - 002285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
        2017-09-02 10:06 - 2015-02-04 05:54 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
        2017-09-02 09:50 - 2017-09-02 09:50 - 000280064 _____ () C:\Users\BECKO\AppData\Roaming\8b5a5cb069b1cfec65bffb9aafc26fad.exe
        2017-09-02 08:06 - 2017-09-02 08:06 - 000000032 ___SH C:\Windows\system32\build.conf
        2017-09-02 08:06 - 2017-09-02 08:06 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\WindowsLoader
        2017-09-02 08:04 - 2017-09-02 08:04 - 002883863 _____ C:\Users\BECKO\Downloads\Windows_7_Loader.zip
        2017-09-02 07:06 - 2017-09-02 07:06 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\monect
        2017-09-02 07:05 - 2017-09-25 10:00 - 000000000 ____D C:\ProgramData\Package Cache
        2017-09-02 07:04 - 2017-09-02 07:04 - 032690791 _____ C:\Users\BECKO\Downloads\PCRemoteReceiverSetup_5_6_0_1.zip
        2017-09-02 04:16 - 2014-07-01 01:14 - 000008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
        2017-09-02 04:16 - 2014-03-10 00:47 - 000099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
        2017-09-02 04:15 - 2014-06-06 09:16 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
        2017-09-02 04:15 - 2014-03-10 00:47 - 000619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
        2017-09-02 04:14 - 2012-03-01 08:46 - 000019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
        2017-09-02 04:14 - 2012-03-01 08:29 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
        2017-09-02 03:23 - 2017-09-02 03:23 - 000645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
        2017-09-02 03:23 - 2017-09-02 03:23 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
        2017-09-02 03:23 - 2017-09-02 03:23 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
        2017-09-02 03:23 - 2017-09-02 03:23 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
        2017-09-02 03:22 - 2017-09-02 03:23 - 000616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
        2017-09-02 03:22 - 2017-09-02 03:22 - 000233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
        2017-09-02 03:22 - 2017-09-02 03:22 - 000139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
        2017-09-02 03:22 - 2017-09-02 03:22 - 000116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
        2017-09-02 03:22 - 2017-09-02 03:22 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
        2017-09-02 03:22 - 2017-09-02 03:22 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
        2017-09-02 03:22 - 2017-09-02 03:22 - 000012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
        2017-09-02 03:19 - 2017-09-02 03:19 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
        2017-09-02 03:14 - 2017-09-02 03:14 - 001158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 001080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
        2017-09-02 03:14 - 2017-09-02 03:14 - 000002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
        2017-09-02 03:10 - 2017-09-02 03:10 - 001505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
        2017-09-02 03:07 - 2015-07-30 16:13 - 000103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
        2017-09-01 23:07 - 2016-05-11 18:19 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
        2017-09-01 23:07 - 2016-02-09 12:50 - 000021504 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
        2017-09-01 23:07 - 2016-02-03 20:59 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
        2017-09-01 23:07 - 2013-07-03 06:36 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
        2017-09-01 23:07 - 2013-07-03 06:36 - 000025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
        2017-09-01 23:07 - 2013-02-12 06:32 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
        2017-09-01 23:06 - 2016-06-25 22:53 - 000297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
        2017-09-01 23:06 - 2016-06-25 22:53 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
        2017-09-01 23:06 - 2016-06-25 22:42 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
        2017-09-01 23:06 - 2016-06-25 22:41 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
        2017-09-01 23:06 - 2016-06-25 22:41 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
        2017-09-01 23:06 - 2016-02-04 21:41 - 000296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
        2017-09-01 23:06 - 2015-11-11 21:39 - 001242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
        2017-09-01 23:06 - 2015-11-11 21:39 - 000487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
        2017-09-01 23:06 - 2015-08-05 20:41 - 000751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
        2017-09-01 23:06 - 2015-07-09 20:42 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
        2017-09-01 23:06 - 2015-07-09 20:42 - 000179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
        2017-09-01 23:06 - 2014-11-11 05:44 - 000186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
        2017-09-01 23:06 - 2012-11-02 08:11 - 000376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
        2017-09-01 23:06 - 2011-03-03 08:38 - 000270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
        2017-09-01 23:06 - 2011-03-03 08:38 - 000132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
        2017-09-01 23:06 - 2011-03-03 08:36 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
        2017-09-01 23:05 - 2016-05-12 18:18 - 000606720 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
        2017-09-01 23:05 - 2016-05-12 18:18 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
        2017-09-01 23:05 - 2016-05-12 18:18 - 000351744 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
        2017-09-01 23:05 - 2016-05-12 18:18 - 000274944 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
        2017-09-01 23:05 - 2016-05-12 18:18 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
        2017-09-01 23:05 - 2016-05-12 18:18 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
        2017-09-01 23:05 - 2016-05-12 18:18 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
        2017-09-01 23:05 - 2016-05-12 17:57 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
        2017-09-01 23:05 - 2016-05-12 17:57 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
        2017-09-01 23:05 - 2015-07-15 20:55 - 001159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
        2017-09-01 23:05 - 2014-03-04 12:17 - 000538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
        2017-09-01 23:05 - 2014-03-04 12:17 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
        2017-09-01 23:05 - 2014-03-04 12:17 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
        2017-09-01 23:05 - 2014-03-04 12:17 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
        2017-09-01 23:05 - 2014-03-04 12:17 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
        2017-09-01 23:05 - 2014-03-04 12:17 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
        2017-09-01 23:05 - 2014-03-04 12:17 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
        2017-09-01 23:05 - 2013-10-19 04:36 - 000159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
        2017-09-01 23:05 - 2013-10-12 05:04 - 000121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
        2017-09-01 23:05 - 2013-10-12 05:03 - 000163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
        2017-09-01 23:05 - 2013-10-12 04:15 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
        2017-09-01 23:05 - 2013-10-12 04:15 - 000126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
        2017-09-01 23:05 - 2011-08-17 07:24 - 000465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
        2017-09-01 23:05 - 2011-08-17 07:19 - 000075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
        2017-09-01 23:03 - 2015-10-13 07:50 - 000712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
        2017-09-01 23:03 - 2014-09-04 08:04 - 000372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
        2017-09-01 23:02 - 2016-07-22 17:51 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
        2017-09-01 23:02 - 2016-01-22 09:04 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
        2017-09-01 23:02 - 2016-01-22 09:04 - 000535040 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
        2017-09-01 23:02 - 2015-11-03 21:55 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
        2017-09-01 23:02 - 2015-04-18 05:56 - 000342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
        2017-09-01 23:02 - 2015-03-04 07:10 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
        2017-09-01 23:02 - 2014-06-18 04:51 - 000646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
        2017-09-01 23:02 - 2013-05-13 06:08 - 000903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
        2017-09-01 23:02 - 2013-05-13 06:08 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
        2017-09-01 23:02 - 2012-07-05 00:16 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
        2017-09-01 23:02 - 2012-07-05 00:14 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
        2017-09-01 23:02 - 2012-07-05 00:14 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
        2017-09-01 23:01 - 2015-12-09 00:53 - 000509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
        2017-09-01 23:01 - 2015-04-13 06:19 - 000259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
        2017-09-01 23:01 - 2014-06-19 01:23 - 001131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
        2017-09-01 23:01 - 2014-06-19 01:23 - 000156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
        2017-09-01 23:01 - 2014-06-19 01:23 - 000081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
        2017-09-01 23:01 - 2011-08-27 07:26 - 000233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
        2017-09-01 23:01 - 2011-05-24 13:44 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
        2017-09-01 23:01 - 2011-02-12 08:35 - 000191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
        2017-09-01 23:01 - 2010-12-23 08:54 - 000850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
        2017-09-01 23:01 - 2010-12-23 08:50 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
        2017-09-01 23:00 - 2015-11-14 01:50 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
        2017-09-01 23:00 - 2015-11-14 01:50 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
        2017-09-01 23:00 - 2015-11-14 01:49 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
        2017-09-01 23:00 - 2015-11-05 22:02 - 000014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
        2017-09-01 23:00 - 2015-11-05 12:48 - 000117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
        2017-09-01 23:00 - 2015-07-15 05:55 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
        2017-09-01 23:00 - 2015-02-03 06:12 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
        2017-09-01 23:00 - 2014-12-19 05:43 - 000164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
        2017-09-01 23:00 - 2014-10-25 04:32 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
        2017-09-01 23:00 - 2014-07-17 04:40 - 000157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
        2017-09-01 23:00 - 2014-07-17 04:39 - 000304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
        2017-09-01 23:00 - 2014-07-17 04:39 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
        2017-09-01 23:00 - 2014-07-17 04:03 - 000184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
        2017-09-01 23:00 - 2013-10-12 05:03 - 000656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
        2017-09-01 23:00 - 2013-10-12 05:01 - 000679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
        2017-09-01 23:00 - 2013-10-12 05:01 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
        2017-09-01 23:00 - 2013-07-26 04:55 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
        2017-09-01 23:00 - 2013-07-12 13:07 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
        2017-09-01 23:00 - 2012-09-26 01:47 - 000078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
        2017-09-01 23:00 - 2012-04-26 07:45 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
        2017-09-01 23:00 - 2012-04-26 07:41 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
        2017-09-01 23:00 - 2012-03-17 10:27 - 000056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
        2017-09-01 23:00 - 2011-12-16 10:52 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
        2017-09-01 23:00 - 2011-06-15 11:55 - 000319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
        2017-09-01 23:00 - 2011-06-15 11:55 - 000163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
        2017-09-01 23:00 - 2011-06-15 11:55 - 000122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
        2017-09-01 23:00 - 2011-06-15 11:55 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
        2017-09-01 23:00 - 2011-06-15 11:55 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
        2017-09-01 22:59 - 2016-05-11 18:19 - 000351744 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
        2017-09-01 22:59 - 2016-05-11 18:19 - 000231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
        2017-09-01 22:59 - 2016-05-11 18:19 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
        2017-09-01 22:59 - 2016-05-11 18:01 - 000026624 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
        2017-09-01 22:59 - 2016-05-11 17:52 - 000188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
        2017-09-01 22:59 - 2015-12-09 00:54 - 001620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 001568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 001325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 000902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 000815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 000740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
        2017-09-01 22:59 - 2015-12-09 00:54 - 000739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 000665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 000541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 000358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
        2017-09-01 22:59 - 2015-12-09 00:54 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
        2017-09-01 22:59 - 2015-12-09 00:53 - 000829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
        2017-09-01 22:59 - 2015-12-09 00:53 - 000609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
        2017-09-01 22:59 - 2015-12-09 00:53 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
        2017-09-01 22:59 - 2015-12-09 00:53 - 000153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
        2017-09-01 22:59 - 2015-12-09 00:53 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
        2017-09-01 22:59 - 2015-12-09 00:53 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
        2017-09-01 22:59 - 2015-12-09 00:53 - 000004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
        2017-09-01 22:59 - 2015-12-09 00:43 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
        2017-09-01 22:59 - 2015-12-09 00:11 - 000177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
        2017-09-01 22:59 - 2015-12-09 00:11 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
        2017-09-01 22:59 - 2015-06-02 02:47 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
        2017-09-01 22:59 - 2015-04-24 20:56 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
        2017-09-01 22:59 - 2014-12-08 05:46 - 000308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
        2017-09-01 22:59 - 2014-12-06 06:50 - 000242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
        2017-09-01 22:59 - 2014-10-14 04:50 - 000523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
        2017-09-01 22:59 - 2013-06-26 01:56 - 000527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
        2017-09-01 22:59 - 2012-11-29 01:57 - 000047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
        2017-09-01 22:59 - 2012-11-29 01:57 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
        2017-09-01 22:59 - 2012-11-29 01:57 - 000000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
        2017-09-01 22:59 - 2012-10-03 19:42 - 000156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
        2017-09-01 22:59 - 2012-10-03 19:42 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
        2017-09-01 22:59 - 2011-03-11 08:33 - 001164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
        2017-09-01 22:59 - 2011-03-11 08:33 - 001137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
        2017-09-01 22:16 - 2012-02-17 08:34 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
        2017-09-01 22:16 - 2012-02-17 07:13 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
        2017-09-01 20:37 - 2017-09-01 20:37 - 000000000 ____D C:\Program Files\Analog Devices
        2017-09-01 20:36 - 2017-09-01 20:36 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
        2017-09-01 20:36 - 2009-05-18 13:32 - 000381440 _____ (Analog Devices, Inc.) C:\Windows\system32\Drivers\ADIHdAud.sys
        2017-09-01 20:36 - 2009-05-18 13:27 - 000032768 _____ (Analog Devices) C:\Windows\system32\adidrm.dll
        2017-09-01 20:36 - 2009-01-27 16:08 - 000139264 _____ (Andrea Electronics Corporation) C:\Windows\system32\AEADIAPO.dll
        2017-09-01 20:36 - 2008-07-15 13:09 - 000090112 _____ (Andrea Electronics Corporation) C:\Windows\system32\AEADISRV.EXE
        2017-09-01 20:36 - 2008-02-28 16:17 - 000034304 _____ (Analog Devices, Inc.) C:\Windows\system32\SmaxCo.dll
        2017-09-01 20:36 - 2007-12-05 07:56 - 000364544 _____ (Andrea Electronics Corporation) C:\Windows\system32\AEADIExt.dll
        2017-09-01 20:36 - 2007-01-10 14:40 - 000050176 _____ (Andrea Electronics Corporation) C:\Windows\system32\AEADIAPR.dll
        2017-09-01 20:35 - 2017-09-01 20:35 - 004695672 _____ (Lenovo Group Limited ) C:\Users\BECKO\Downloads\7ka216ww.exe
        2017-09-01 20:29 - 2017-09-01 20:30 - 000000000 ____D C:\ProgramData\dllescort
        2017-09-01 20:18 - 2017-09-01 20:18 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Google
        2017-09-01 20:15 - 2017-09-01 20:15 - 000002207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
        2017-09-01 20:15 - 2017-09-01 20:15 - 000002195 _____ C:\Users\Public\Desktop\Google Chrome.lnk
        2017-09-01 20:14 - 2017-09-03 07:24 - 000058016 _____ C:\Users\BECKO\AppData\Local\GDIPFONTCACHEV1.DAT
        2017-09-01 20:14 - 2017-09-01 20:38 - 000000000 ____D C:\Users\BECKO\AppData\Local\Google
        2017-09-01 20:14 - 2017-09-01 20:15 - 000000000 ____D C:\Program Files\Google
        2017-09-01 20:14 - 2017-09-01 20:14 - 000000000 ____D C:\Users\BECKO\AppData\Local\Deployment
        2017-09-01 20:14 - 2017-09-01 20:14 - 000000000 ____D C:\Users\BECKO\AppData\Local\Apps\2.0
        2017-09-01 20:11 - 2017-09-03 17:27 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Adobe
        2017-09-01 20:11 - 2017-09-01 20:11 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Macromedia
        2017-09-01 20:10 - 2017-09-01 20:10 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
        2017-09-01 20:10 - 2017-09-01 20:10 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
        2017-09-01 20:09 - 2017-09-01 20:10 - 000000000 ____D C:\Windows\system32\Macromed
        2017-09-01 19:51 - 2017-09-01 19:18 - 000000000 ____D C:\Windows\Panther
        2017-09-01 19:37 - 2017-09-01 19:37 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
        2017-09-01 19:19 - 2017-09-01 19:19 - 000001393 _____ C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
        2017-09-01 19:18 - 2017-09-24 12:45 - 000000000 ____D C:\Users\BECKO
        2017-09-01 19:18 - 2017-09-20 11:03 - 000000000 ____D C:\Users\BECKO\AppData\Local\VirtualStore
        2017-09-01 19:18 - 2017-09-01 19:18 - 000000020 ___SH C:\Users\BECKO\ntuser.ini
        2017-09-01 19:18 - 2011-04-12 04:36 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Media Center Programs
        2017-09-01 18:59 - 2017-09-01 18:59 - 000001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
        2017-09-01 18:58 - 2017-09-01 18:58 - 000001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
        2017-09-01 18:57 - 2017-09-01 18:57 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
        2017-08-30 17:29 - 2017-08-31 17:45 - 000000000 ____D C:\3590F75ABA9E485486C100C1A9D4FF06Z.Z...ZZZ...Z.ZZ
        ==================== One Month Modified files and folders ========
        (If an entry is included in the fixlist, the file/folder will be moved.)
        2017-09-25 09:55 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\inf
        2017-09-25 03:28 - 2009-07-14 07:34 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
        2017-09-25 03:28 - 2009-07-14 07:34 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
        2017-09-24 18:44 - 2017-08-01 08:22 - 000000000 ____D C:\Program Files\Cheat Engine 6.7
        2017-09-24 12:21 - 2009-07-14 05:37 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
        2017-09-24 12:17 - 2009-07-14 07:52 - 000000000 ____D C:\Program Files\MSBuild
        2017-09-22 13:27 - 2009-07-14 07:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
        2017-09-22 09:46 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\NDF
        2017-09-18 18:22 - 2009-07-14 07:52 - 000000000 ____D C:\Windows\Downloaded Program Files
        2017-09-05 19:48 - 2016-09-16 12:58 - 000000000 ____D C:\Intel
        2017-09-05 18:17 - 2010-11-21 00:01 - 000765700 _____ C:\Windows\system32\PerfStringBackup.INI
        2017-09-04 23:26 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\rescache
        2017-09-04 03:39 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\AppCompat
        2017-09-03 17:33 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\PolicyDefinitions
        2017-09-03 03:34 - 2009-07-14 07:33 - 000267016 _____ C:\Windows\system32\FNTCACHE.DAT
        2017-09-03 03:30 - 2009-07-14 07:52 - 000000000 ____D C:\Program Files\DVD Maker
        2017-09-03 03:30 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\tracing
        2017-09-03 03:30 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\migwiz
        2017-09-03 03:30 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\Dism
        2017-09-03 03:30 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
        2017-09-02 09:42 - 2009-07-14 05:37 - 000000000 ____D C:\Program Files\Common Files\System
        2017-09-02 09:41 - 2009-07-14 07:52 - 000000000 ____D C:\Program Files\Windows Defender
        2017-09-01 19:56 - 2009-07-14 05:37 - 000000000 __RHD C:\Users\Public\Libraries
        2017-09-01 19:51 - 2009-07-14 07:52 - 000028672 _____ C:\Windows\system32\config\BCD-Template
        2017-09-01 18:58 - 2009-07-14 07:52 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
        2017-09-01 18:58 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\sysprep
        2017-09-01 18:53 - 2011-04-12 04:37 - 000000000 ____D C:\Windows\CSC
        ==================== Files in the root of some directories =======
        2017-09-02 09:50 - 2017-09-02 09:50 - 000280064 _____ () C:\Users\BECKO\AppData\Roaming\8b5a5cb069b1cfec65bffb9aafc26fad.exe
        Some files in TEMP:
        ====================
        2017-09-20 15:53 - 2017-09-20 15:54 - 006087840 _____ (Innovative Solutions                                        ) C:\Users\BECKO\AppData\Local\Temp\tmp-drivermax9399034.exe
        ==================== Bamital & volsnap ======================
        (There is no automatic fix for files that do not pass verification.)
        C:\Windows\explorer.exe => File is digitally signed
        C:\Windows\system32\winlogon.exe => File is digitally signed
        C:\Windows\system32\wininit.exe => File is digitally signed
        C:\Windows\system32\svchost.exe => File is digitally signed
        C:\Windows\system32\services.exe => File is digitally signed
        C:\Windows\system32\User32.dll => File is digitally signed
        C:\Windows\system32\userinit.exe => File is digitally signed
        C:\Windows\system32\rpcss.dll => File is digitally signed
        C:\Windows\system32\dnsapi.dll => File is digitally signed
        C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
        LastRegBack: 2017-09-20 03:59
        ==================== End of FRST.txt ============================
         
        Addition_25-09-2017 12.25.58.txt
      • от CaptainJord
        Здравейте, реших да си направя профилактика на компютъра ми, нямам съмнение, но просто ей така да пробвам. Бях си свалил програмата ,,RegRun Reanimator ', която я има в сайта, откри някакви злонамерени файлове и ги изчистих. За по-сигурно реших да проверя и по този ,,по-дълбок'' начин. Надявам се да съм постъпил правилно.
        FRST - log
        Addition - log
         
    • Разглеждащи в момента   0 потребители

      Няма регистрирани потребители разглеждащи тази страница.

    • Дарение

    ×

    Информация

    Този сайт използва бисквитки (cookies), за най-доброто потребителско изживяване. С използването му, вие приемате нашите Условия за ползване.